Skip to content

Lws49/feat marketplace pr7 attempt polymorphic seam#8508

Draft
LWS49 wants to merge 8 commits into
lws49/feat-marketplace-pr6d-auditfrom
lws49/feat-marketplace-pr7-attempt-polymorphic-seam
Draft

Lws49/feat marketplace pr7 attempt polymorphic seam#8508
LWS49 wants to merge 8 commits into
lws49/feat-marketplace-pr6d-auditfrom
lws49/feat-marketplace-pr7-attempt-polymorphic-seam

Conversation

@LWS49

@LWS49 LWS49 commented Jul 23, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

LWS49 added 8 commits July 22, 2026 13:39
Specs commit (use_transactional_fixtures is false), so a bare per-second
timestamp collides whenever two rspec processes start within the same second,
tripping unique constraints. Append a random suffix per process.
Gate assessment-marketplace browsing per person rather than per current-course
role. A typed allow-list (user / instance / email-domain / everyone rules)
grants access to baseline-capable users (course manager/owner or instance
instructor/admin anywhere), with individual access blocks as overrides.

- AllowlistRule and AccessBlock models, migrations, and per-type uniqueness
- RuleMatchQuery / RulePreviewQuery / AccessListQuery for matching and audit
- ability component gates :access_marketplace on the allow-list minus blocks
- User baseline predicates and delete-user FK handling for both tables
- System::Admin CRUD, access-list, and block/unblock endpoints
System::Admin page to manage the marketplace allow-list: add/remove typed
rules (specific user, whole instance, or email domain) with a live preview of
who each rule would let in, and an open-to-everyone / restrict toggle.
Add the access audit section to the allow-list page: an audit list of everyone
with effective access (filterable by status and granting rule), block/unblock
controls per user, and the rule-match counts that flag allow-list rules which
currently grant access to nobody.
@LWS49
LWS49 force-pushed the lws49/feat-marketplace-pr6d-audit branch 4 times, most recently from 86dac50 to 69326c2 Compare July 24, 2026 05:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant