Joseph Doherty 50b85d41bd Consolidate LDAP roles into OPC UA session roles with granular write permissions ...

Map LDAP groups to custom OPC UA role NodeIds on RoleBasedIdentity.GrantedRoleIds
during authentication, replacing the username-to-role side cache. Split ReadWrite
into WriteOperate/WriteTune/WriteConfigure so write access is gated per Galaxy
security classification. AnonymousCanWrite now behaves consistently regardless
of LDAP state.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-29 01:50:16 -04:00

..

reqs

Replace full address space rebuild with incremental subtree sync

2026-03-26 15:23:11 -04:00

AddressSpace.md

Add component-level documentation for all 14 server subsystems

2026-03-26 15:47:59 -04:00

AlarmTracking.md

Consolidate LDAP roles into OPC UA session roles with granular write permissions

2026-03-29 01:50:16 -04:00

CliTool.md

Add client-side failover to CLI tool for redundancy testing

2026-03-28 14:41:06 -04:00

Configuration.md

Consolidate LDAP roles into OPC UA session roles with granular write permissions

2026-03-29 01:50:16 -04:00

DataTypeMapping.md

Add component-level documentation for all 14 server subsystems

2026-03-26 15:47:59 -04:00

GalaxyRepository.md

Add component-level documentation for all 14 server subsystems

2026-03-26 15:47:59 -04:00

HistoricalDataAccess.md

Remove static Users auth, use shared QualityMapper for historian, simplify LDAP permission checks

2026-03-28 19:23:20 -04:00

IncrementalSync.md

Add component-level documentation for all 14 server subsystems

2026-03-26 15:47:59 -04:00

MxAccessBridge.md

Add component-level documentation for all 14 server subsystems

2026-03-26 15:47:59 -04:00

OpcUaServer.md

Consolidate LDAP roles into OPC UA session roles with granular write permissions

2026-03-29 01:50:16 -04:00

ReadWriteOperations.md

Add authentication and role-based write access control

2026-03-27 02:14:37 -04:00

Redundancy.md

Add client-side failover to CLI tool for redundancy testing

2026-03-28 14:41:06 -04:00

security.md

Consolidate LDAP roles into OPC UA session roles with granular write permissions

2026-03-29 01:50:16 -04:00

ServiceHosting.md

Add configurable non-transparent OPC UA server redundancy

2026-03-28 13:32:17 -04:00

StatusDashboard.md

Add component-level documentation for all 14 server subsystems

2026-03-26 15:47:59 -04:00

Subscriptions.md

Add component-level documentation for all 14 server subsystems

2026-03-26 15:47:59 -04:00