dohertj2 dohertj2
0 Followers · 0 Following
  • Joined on 2026-02-20
Repositories
18
 Projects Packages Public Activity Starred Repositories
dohertj2 closed issue dohertj2/lmxopcua#468 2026-08-01 12:25:44 -04:00
Universal discovery browser: full controller-tree render is live-verify-blocked by the ab_server fixture (no @tags walk)
dohertj2 pushed to master at dohertj2/lmxopcua 2026-08-01 12:25:24 -04:00
c2c3c52274 fix(abcip): unblock the controller-browse gate, and fix the decoder it exposed (#468)
dohertj2 opened issue dohertj2/lmxopcua#536 2026-08-01 12:23:11 -04:00
Browse-commit discards the discovered data type, so a browsed REAL commits as a DINT (AbCip, TwinCAT)
dohertj2 commented on issue dohertj2/lmxopcua#535 2026-08-01 11:54:20 -04:00
AdminUI: /uns area + line names bypass the UNS segment rule, blocking fleet-wide deploys

Fixed. master 1a1dbc3f, pushed.

The rule now has one home

Configuration.Validation.UnsSegment — IsValid, AttributePattern, Message, Describe. DraftValidator no longer…

dohertj2 closed issue dohertj2/lmxopcua#535 2026-08-01 11:54:20 -04:00
AdminUI: /uns area + line names bypass the UNS segment rule, blocking fleet-wide deploys
dohertj2 pushed to master at dohertj2/lmxopcua 2026-08-01 11:54:02 -04:00
1a1dbc3f00 fix(uns): enforce the UNS segment rule on every authoring path (#535)
9303289d05 docs(plan): correct the self-form watchdog record — rejected, TCP guard was interim
Compare 2 commits »
dohertj2 commented on issue dohertj2/lmxopcua#520 2026-08-01 11:04:11 -04:00
Node ACLs are authored and deployed but never enforced — wire IPermissionEvaluator or retire the surface

The UNS gap in the stage-7 gate is closed. master a88cefd5.

The first pass could not exercise UNS-realm scope selection — SITE-A had no UNS, so the picker's UNS column correctly showed…

dohertj2 pushed to master at dohertj2/lmxopcua 2026-08-01 11:04:02 -04:00
a88cefd5ee docs(security): close the stage-7 gate's UNS gap — legs 12-15
dohertj2 opened issue dohertj2/lmxopcua#535 2026-08-01 11:03:47 -04:00
AdminUI: /uns area + line names bypass the UNS segment rule, blocking fleet-wide deploys
dohertj2 commented on issue dohertj2/lmxopcua#520 2026-08-01 10:54:47 -04:00
Node ACLs are authored and deployed but never enforced — wire IPermissionEvaluator or retire the surface

Stage 7 done — #520 is complete. master 3796c0bf (merge), work commit d542ab5b. Pushed.

What landed

Grants are authored from a scope picker over the cluster's real raw + UNS…

dohertj2 pushed to main at dohertj2/scadaproj 2026-08-01 10:54:22 -04:00
7a6f997180 docs(index): OtOpcUa #520 complete — ACL grants authored from a scope picker (stage 7)
dohertj2 pushed to master at dohertj2/lmxopcua 2026-08-01 10:53:41 -04:00
3796c0bf22 merge: ACL scope picker + authoring-time resolution (#520 stage 7)
d542ab5b7c feat(security): author ACL grants from the real tree, not free text (#520 stage 7)
Compare 2 commits »
dohertj2 closed issue dohertj2/lmxopcua#520 2026-08-01 10:53:40 -04:00
Node ACLs are authored and deployed but never enforced — wire IPermissionEvaluator or retire the surface
dohertj2 commented on issue dohertj2/lmxopcua#520 2026-08-01 10:01:24 -04:00
Node ACLs are authored and deployed but never enforced — wire IPermissionEvaluator or retire the surface

Stage 6 merged to master — merge d4389f57, pushed. Stage 8 live gate PASSED on docker-dev the same day.

Enforcement is now complete behind Security:Acl:Enabled (still default…

dohertj2 pushed to main at dohertj2/scadaproj 2026-08-01 10:00:58 -04:00
555d1b4afc docs(index): OtOpcUa gates reads/browse/subscribe too — the previous entry said the opposite
dohertj2 pushed to master at dohertj2/lmxopcua 2026-08-01 10:00:27 -04:00
d4389f57a2 merge: node ACL enforcement on read, browse and subscribe (#520 stage 6)
c4f537a60c docs(security): record the stage 6 live gate — PASSED on docker-dev
2aa42f90eb fix(security): the ACL startup warning described stage 5's scope, not stage 6's
8cdbcb9823 fix(security): resolve the event-subscribe gate's source through IsHandleInNamespace
ce404df970 fix(security): count only this page's references in the browse-filter summary
Compare 6 commits »
dohertj2 commented on issue dohertj2/lmxopcua#520 2026-08-01 08:35:49 -04:00
Node ACLs are authored and deployed but never enforced — wire IPermissionEvaluator or retire the surface

Stage 5 merged to master — merge 1ccc7400 (branch commit f692f6af), pushed to origin.

This supersedes the "done but unmerged" note in my previous comment. Nothing changed in the tree…

dohertj2 pushed to master at dohertj2/lmxopcua 2026-08-01 08:35:27 -04:00
1ccc74005a merge: node ACL enforcement on write, alarms and HistoryRead (#520 stage 5)
f692f6afe4 feat(security): enforce node ACLs on write, alarms and HistoryRead (#520 stage 5)
Compare 2 commits »
dohertj2 commented on issue dohertj2/lmxopcua#520 2026-08-01 05:01:34 -04:00
Node ACLs are authored and deployed but never enforced — wire IPermissionEvaluator or retire the surface

Stage 5 done — write, alarms and HistoryRead are enforced behind Security:Acl:Enabled

Branch feat/gitea-520-stage5-enforce, not yet merged. Full solution suite green.

**The flag defaults…

dohertj2 pushed to main at dohertj2/scadaproj 2026-08-01 05:01:10 -04:00
883601a72b docs(index): OtOpcUa node ACLs are now enforced behind Security:Acl:Enabled (#520 stage 5)