feat(managementservice): MgmtDeployArea — Deployer-only, scoped by the area's owning site (fail-closed on an unknown area), long-running like MgmtDeploySite (Gitea #40)

2026-10-22 14:10:53 -04:00
parent eb1c9ea7f9
commit f72c72c52f
7 changed files with 154 additions and 5 deletions
@@ -133,6 +133,9 @@ public class RequiredRoleMatrixTests
        // Bulk site deploy. Same authority as the single-instance deploy
        // it batches — it is N of those, not a new class of privilege.
        ["MgmtDeploySite"] = [Roles.Deployer],
+        // Area-subtree bulk deploy (Gitea #40): the site deploy narrowed to one
+        // area subtree — same authority, never a wider one.
+        ["MgmtDeployArea"] = [Roles.Deployer],
        ["MgmtEnableInstance"] = [Roles.Deployer],
        ["MgmtDisableInstance"] = [Roles.Deployer],
        ["MgmtDeleteInstance"] = [Roles.Deployer],