raystack / frontier
44%
main: 43%

Repo Added 27 Jul 2023 06:58AM UTC

Token xRqMBdQBcqmLktLNAeQpRpj0YfJbkFc6Q regen

Build 5079 Last

Committed 08 Jun 2026 08:55AM UTC coverage: 43.509% (+0.1%) from 43.41%

Committed by

Commit Message

fix(bootstrap): reconcile predefined roles instead of add-only migrate

MigrateRoles skipped any predefined role that already existed, so it was
add-only: when a predefined role was narrowed in a later release, the
dropped permissions kept granting access on existing deployments because
the boot migration never updated the role.

createRole now reconciles an existing predefined role when its permission
set has drifted from the definition, going through role.Update (which
prunes the removed permission tuples and rewrites the current set). When the
permission set is unchanged it still short-circuits, so there is no churn or
audit noise on a normal boot.

Adds Update to the bootstrap RoleService interface and unit tests for the
create / unchanged / drifted paths.

Refs #1661

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Coverage Stats

41 of 45 new or added lines in 1 file covered. (91.11%)

16581 of 38109 relevant lines covered (43.51%)

12.2 hits per line

38109 RELEVANT LINES 16581 COVERED LINES

12.2 HITS PER LINE

Builds	Branch	Commit	Type	Ran	Committer	Via	Coverage
27126681961	fix/migrate-roles-reconcile	fix(bootstrap): reconcile predefined roles instead of add-only migrate MigrateRoles skipped any predefined role that already existed, so it was add-only: when a predefined role was narrowed in a later release, the dropped permissions kept grantin...	Pull #1687	08 Jun 2026 09:00AM UTC	whoAbhishekSah	github	43.51
27123707659	fix/migrate-roles-reconcile	fix(bootstrap): reconcile predefined roles instead of add-only migrate MigrateRoles skipped any predefined role that already existed, so it was add-only: when a predefined role was narrowed in a later release, the dropped permissions kept grantin...	Pull #1687	08 Jun 2026 07:59AM UTC	whoAbhishekSah	github	43.5
27123374642	fix/migrate-roles-reconcile	fix(bootstrap): reconcile predefined roles instead of add-only migrate MigrateRoles skipped any predefined role that already existed, so it was add-only: when a predefined role was narrowed in a later release, the dropped permissions kept grantin...	Pull #1687	08 Jun 2026 07:52AM UTC	whoAbhishekSah	github	43.5
27119862960	fix/migrate-roles-reconcile	fix(bootstrap): reconcile predefined roles instead of add-only migrate MigrateRoles skipped any predefined role that already existed, so it was add-only: when a predefined role was narrowed in a later release, the dropped permissions kept grantin...	Pull #1687	08 Jun 2026 06:29AM UTC	whoAbhishekSah	github	43.28
27119722948	fix/migrate-roles-reconcile	fix(bootstrap): reconcile predefined roles instead of add-only migrate MigrateRoles skipped any predefined role that already existed, so it was add-only: when a predefined role was narrowed in a later release, the dropped permissions kept grantin...	Pull #1687	08 Jun 2026 06:25AM UTC	whoAbhishekSah	github	43.28
27118141309	fix/migrate-roles-reconcile	fix(bootstrap): reconcile predefined roles instead of add-only migrate MigrateRoles skipped any predefined role that already existed, so it was add-only: when a predefined role was narrowed in a later release, the dropped permissions kept grantin...	Pull #1687	08 Jun 2026 05:40AM UTC	whoAbhishekSah	github	43.31
27117458724	fix/migrate-roles-reconcile	fix(bootstrap): reconcile predefined roles instead of add-only migrate MigrateRoles skipped any predefined role that already existed, so it was add-only: when a predefined role was narrowed in a later release, the dropped permissions kept grantin...	Pull #1687	08 Jun 2026 05:18AM UTC	whoAbhishekSah	github	43.31

raystack / frontier
44%
main: 43%

raystack / frontier 44% main: 43%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

CHANGE BRANCH x

Relevant lines Covered

Source Files on fix/migrate-roles-reconcile

Recent builds

raystack / frontier
44%
main: 43%

README BADGES
x

CHANGE BRANCH
x