admin/0pt
5
0
Fork 0
Code Issues 9 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix(doc0): anropa DOC0 som den beviljade tjänsteaktören #437

Merged
admin merged 1 commits from fix/doc0-service-actor into main 2026-11-02 15:19:58 +00:00
Conversation 0 Commits 1 Files Changed 4
+21 -7
admin commented 2026-11-02 15:17:32 +00:00
Owner
Copy Link
Copy Source

DOC0 nekar ett x-actor-id som tjänsteidentiteten saknar actor_grant för. 0pt skickade användarens sub → DOC0_ACCESS_DENIED → varje uppladdning blev outcome_unknown.

Nu: journalen och projektauktoriseringen behåller den verifierade användaren; endast DOC0-anropet agerar som tjänsten (DOC0_SERVICE_ACTOR_ID).

DOC0 nekar ett `x-actor-id` som tjänsteidentiteten saknar `actor_grant` för. 0pt skickade användarens sub → `DOC0_ACCESS_DENIED` → varje uppladdning blev `outcome_unknown`. Nu: journalen och projektauktoriseringen behåller den verifierade användaren; endast DOC0-anropet agerar som tjänsten (`DOC0_SERVICE_ACTOR_ID`).
admin added 1 commit 2026-11-02 15:17:33 +00:00
fix(doc0): call DOC0 as the granted service actor
CI (SIAX Cloud) / sonar (pull_request) Skipped
Details
CI (SIAX Cloud) / integration (push) Skipped
Details
CI (SIAX Cloud) / sonar (push) Skipped
Details
masterplan-lock / check (pull_request) Successful in 3s
Details
CI (SIAX Cloud) / security (push) Successful in 15s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 15s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 15s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 1m2s
Details
CI (SIAX Cloud) / integration (pull_request) Successful in 1m11s
Details
masterplan-lock / check (push) Successful in 1m38s
Details
CI (SIAX Cloud) / quality (push) Successful in 1m49s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 1m50s
Details
e93db5fc1f 
DOC0 denies an x-actor-id that the service identity has no actor_grant for, so
every upload/structure call from 0pt failed with DOC0_ACCESS_DENIED and became
outcome_unknown. The journal and project authorization keep the verified
end-user actor; only the DOC0 request acts as the service (DOC0_SERVICE_ACTOR_ID).
CODEOWNERS rules requested review from sax3l 2026-11-02 15:17:33 +00:00
admin scheduled this pull request to auto merge when all checks succeed 2026-11-02 15:19:57 +00:00
admin merged commit 71d742bdff into main 2026-11-02 15:19:58 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
sax3l
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
siax-bot siax-ci siax-healer (siax-healer (CI self-healing agent)) admin (Simon Axelsson)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/0pt#437