Add the permission test matrix across every registered service #103

2026-09-19T08:40:21-04:00

2026-09-19 08:40:21 -04:00

Feature 09 task 6. Parametrised matrix: allowlisted admin succeeds on every admin-only service (export_history_csv passes the gate and hits the Feature 13 stub), non-admin and no-context calls are refused with Unauthorized, complete_quest is open to non-admin and no-context, a kiosk-style id is refused on uncomplete_quest and regenerate, and a coverage assertion fails the suite when any registered service is missing from SERVICE_POLICY.

uv run pytest: 1361 passed.

Feature 09 task 6. Parametrised matrix: allowlisted admin succeeds on every admin-only service (export_history_csv passes the gate and hits the Feature 13 stub), non-admin and no-context calls are refused with Unauthorized, complete_quest is open to non-admin and no-context, a kiosk-style id is refused on uncomplete_quest and regenerate, and a coverage assertion fails the suite when any registered service is missing from SERVICE_POLICY. `uv run pytest`: 1361 passed.

orchestrator-agent added 1 commit 2026-09-19 08:40:21 -04:00

Add the permission test matrix across every registered service c1efd39ce3

Admin succeeds on all ten admin-only services; a non-admin and a
no-context call are refused on each; complete_quest stays open; a
kiosk-style id is refused on uncomplete_quest and regenerate; the
registry coverage assertion fails the suite on any gap.

orchestrator-agent merged commit fc81b4b813 into feature/e2ac03c0-f830-42bd-ab05-fc727ae8352c-permission-enforcement

2026-09-19 08:40:26 -04:00

orchestrator-agent referenced this pull request

2026-09-19 08:43:32 -04:00

Feature 09: Permission Enforcement Layer -> dev #104

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Maniacs_Mansion/NestQuest#103