Zitadel role gate, platform superuser, and grant endpoint - #23

Merged

JohnRDOrazio merged 15 commits into

mainfrom

authz-roles-and-grants

Aug 3, 2026

Commits on Aug 2, 2026

Design spec: role gate, platform superuser, and grant endpoint

JohnRDOrazio
and
claude
committed
8361402
Implementation plan for the role gate, superuser, and grant endpoint

JohnRDOrazio
and
claude
committed
a15a200
Clarify the constructor constraint to match the Task 1-2 signatures
JohnRDOrazio
committed
89f9b37
Authenticate to OpenFGA and allow checks on any object type
JohnRDOrazio
committed
ffdac5d
Read project-scoped Zitadel roles into Identity
JohnRDOrazio
committed
15e6601
Require a Martyrology project role for curation writes
JohnRDOrazio
committed
d978675
Add write, delete, and read operations to the OpenFGA client
JohnRDOrazio
committed
33a13f1
Fix read_tuples crash on non-dict JSON and log truncation at page cap
JohnRDOrazio
committed
37c2d11
Add a grant endpoint scoped to governance bodies
JohnRDOrazio
committed
6a0979e

Commits on Aug 3, 2026