Joseph Doherty
09cd579220
Add FolderSegment member to NodeAclScopeKind; update WalkSystemPlatform to report NodeAclScopeKind.FolderSegment (not Equipment) for each visited Galaxy folder level, so MatchedGrant.Scope in AuthorizationDecision.Provenance correctly distinguishes Galaxy folder grants from UNS Equipment grants in the audit trail and Admin UI diagnostics. Three regression tests added to PermissionTrieTests. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
19 lines
566 B
C#
19 lines
566 B
C#
namespace ZB.MOM.WW.OtOpcUa.Configuration.Enums;
|
|
|
|
/// <summary>ACL scope level. Per <c>acl-design.md</c> §"Scope Hierarchy".</summary>
|
|
public enum NodeAclScopeKind
|
|
{
|
|
Cluster,
|
|
Namespace,
|
|
UnsArea,
|
|
UnsLine,
|
|
Equipment,
|
|
/// <summary>
|
|
/// A Galaxy (SystemPlatform-kind) folder segment anchored below a namespace.
|
|
/// Distinguishes folder grants from UNS <see cref="Equipment"/> grants in the
|
|
/// <c>AuthorizationDecision.Provenance</c> audit trail and Admin UI diagnostics.
|
|
/// </summary>
|
|
FolderSegment,
|
|
Tag,
|
|
}
|