dohertj2

dohertj2 commented on issue dohertj2/lmxopcua#520

2026-08-01 02:39:22 -04:00

Node ACLs are authored and deployed but never enforced — wire IPermissionEvaluator or retire the surface

Stage 3 is merged to master — merge 94990990 (stage-3 commit 3a6b2a1d), pushed.

Two of the four wire-up blockers this issue tracks are now closed:

~~Raw-realm nodes have no…

dohertj2 pushed to main at dohertj2/scadaproj

2026-08-01 02:39:08 -04:00

6b12a7b75e docs(index): OtOpcUa AB CIP/Legacy now honour the authored EtherNet/IP port (#534)

dohertj2 pushed to master at dohertj2/lmxopcua

2026-08-01 02:38:22 -04:00

9499099028 merge: ACL scope model + role/identity fixes + four real test failures (#520 s3, #532, #533, #534)

01538464b7 fix(abcip,ablegacy): honour the authored EtherNet/IP port (#534)

b13bdc154a test(ablegacy): deploy the PCCC fixture, one port per family (#534)

df340b8bba fix(tests): three real failures the integration suite had stopped catching

06c56d7719 fix(cluster,acl): OTOPCUA_ROLES fallback + one string-identity rule (#532, #533)

Compare 6 commits »

dohertj2 closed issue dohertj2/lmxopcua#534

2026-08-01 02:24:50 -04:00

AbLegacy PCCC read/write fails against every ab_server family (BadCommunicationError) — path never validated against a simulator

dohertj2 commented on issue dohertj2/lmxopcua#534

2026-08-01 02:24:49 -04:00

AbLegacy PCCC read/write fails against every ab_server family (BadCommunicationError) — path never validated against a simulator

Root-caused and fixed in 01538464. It was our bug, in two drivers, and it is a production defect — not a fixture or protocol limitation.

Port was carried and consumed by nobody.…

dohertj2 opened issue dohertj2/lmxopcua#534

2026-08-01 02:18:12 -04:00

AbLegacy PCCC read/write fails against every ab_server family (BadCommunicationError) — path never validated against a simulator

dohertj2 closed issue dohertj2/lmxopcua#533

2026-08-01 01:51:57 -04:00

ACL: three different string-identity rules in one authorization path

dohertj2 commented on issue dohertj2/lmxopcua#532

2026-08-01 01:51:56 -04:00

Cluster:Roles has no OTOPCUA_ROLES fallback, despite docs claiming one — ClusterId resolves null

Fixed in 06c56d77 (branch fix/gitea-532-533-roles-and-string-identity).

Decision: implement the documented fallback. The issue framed this as a three-way choice and warned that silently…

dohertj2 closed issue dohertj2/lmxopcua#532

2026-08-01 01:51:56 -04:00

Cluster:Roles has no OTOPCUA_ROLES fallback, despite docs claiming one — ClusterId resolves null

dohertj2 commented on issue dohertj2/lmxopcua#533

2026-08-01 01:51:56 -04:00

ACL: three different string-identity rules in one authorization path

Fixed in 06c56d77 (branch fix/gitea-532-533-roles-and-string-identity).

The rule, now stated once on AclScopeRef and applied throughout: identifiers — ScopeId, ClusterId,…

dohertj2 commented on issue dohertj2/lmxopcua#520

2026-08-01 01:10:46 -04:00

Node ACLs are authored and deployed but never enforced — wire IPermissionEvaluator or retire the surface

Stage 3 done — 3a6b2a1d on feat/gitea-520-stage3-raw-scope (unmerged). Stages 1/2/4 merged earlier in fbe7403c.

Stage 3 makes the /raw device tree addressable by an ACL rule and…

dohertj2 closed issue dohertj2/lmxopcua#530

2026-08-01 01:10:31 -04:00

AdminUI: both ACL warning banners describe enforcement that no longer exists

dohertj2 opened issue dohertj2/lmxopcua#531

2026-08-01 01:10:31 -04:00

AdminUI.Tests: PageAuthorizationGuardTests red on master — /apikeys was never classified

dohertj2 closed issue dohertj2/lmxopcua#531

2026-08-01 01:10:31 -04:00

AdminUI.Tests: PageAuthorizationGuardTests red on master — /apikeys was never classified

dohertj2 opened issue dohertj2/lmxopcua#532

2026-08-01 01:10:31 -04:00

Cluster:Roles has no OTOPCUA_ROLES fallback, despite docs claiming one — ClusterId resolves null

dohertj2 opened issue dohertj2/lmxopcua#533

2026-08-01 01:10:31 -04:00

ACL: three different string-identity rules in one authorization path

dohertj2 closed issue dohertj2/lmxopcua#528

2026-08-01 01:10:30 -04:00

ACL: ConfigDbApiKeyStore confers roles from Cluster-scoped grants in ANY cluster

dohertj2 opened issue dohertj2/lmxopcua#529

2026-08-01 01:10:30 -04:00

ACL: a NodeAcl row can scope at an entity in another cluster and pass the deploy gate

dohertj2 closed issue dohertj2/lmxopcua#529

2026-08-01 01:10:30 -04:00

ACL: a NodeAcl row can scope at an entity in another cluster and pass the deploy gate

dohertj2 opened issue dohertj2/lmxopcua#530

2026-08-01 01:10:30 -04:00

AdminUI: both ACL warning banners describe enforcement that no longer exists