3 Commits

Author	SHA1	Message	Date
Joseph Doherty	50b85d41bd	Consolidate LDAP roles into OPC UA session roles with granular write permissions ... Map LDAP groups to custom OPC UA role NodeIds on RoleBasedIdentity.GrantedRoleIds during authentication, replacing the username-to-role side cache. Split ReadWrite into WriteOperate/WriteTune/WriteConfigure so write access is gated per Galaxy security classification. AnonymousCanWrite now behaves consistently regardless of LDAP state. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-29 01:50:16 -04:00
Joseph Doherty	50b9603465	Propagate alarm events up the full notifier chain so subscribers at any ancestor see them ... Previously alarms were only reported to the immediate parent node and the Server node. Now ReportEventUpNotifierChain walks the full parent chain so clients subscribed at TestArea see alarms from TestMachine_001, and EventNotifier is set on all ancestors of alarm-containing nodes. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 20:25:55 -04:00
Joseph Doherty	965e430f48	Add component-level documentation for all 14 server subsystems ... Provides technical documentation covering OPC UA server, address space, Galaxy repository, MXAccess bridge, data types, read/write, subscriptions, alarms, historian, incremental sync, configuration, dashboard, service hosting, and CLI tool. Updates README with component documentation table. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-26 15:47:59 -04:00