27117699626
43%
main: 43%

Ran 08 Jun 2026 05:26AM UTC

Jobs 1

Files 276

Run time 1min

Badge

Embed ▾

Committed 08 Jun 2026 05:21AM UTC coverage: 43.224%. Remained the same

Build # 27117699626

Build Type

Pull #1688

github

Committed by

whoAbhishekSah

Commit Message

docs(authz): document disable vs delete semantics

Disable and Delete are deliberately different: Disable is a reversible
soft-stop that flips state only and leaves every SpiceDB relation in place
so Enable restores access exactly as it was; Delete (core/deleter) is the
revocation path that cascades the relations away.

Documents the decision without any behaviour change:
- doc comments on Disable for organization/project/group/user spelling out
  that tuples are intentionally preserved and that, today, only
  organization.Get blocks disabled entities at read time (project/group/user
  reads do not filter on state);
- an authz docs page (disable-vs-delete) with a "which one do I want" table
  and the explicit caveat that disable is not a security boundary on its own.

Resolves the disable-vs-revoke design row of #1661.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Pull Request Pull Request #1688: docs(authz): document disable vs delete semantics

Coverage Stats

16444 of 38044 relevant lines covered (43.22%)

12.14 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	27117699626.1	08 Jun 2026 05:26AM UTC	276	43.22	GitHub Action Run

raystack / frontier / 27117699626
43%
main: 43%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27117699626

raystack / frontier / 27117699626 43% main: 43%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27117699626

raystack / frontier / 27117699626
43%
main: 43%

README BADGES
x