fix(plugin-sharing): the record owner and an explicit Modify-All holder may mint a share link without visibility (ADR-0111 D8 rule 1, ruling A′) by objectstack-fleet[bot] · Pull Request #21447 · objectstack-ai/objectstack

test(runtime): pin share-link mint authority on an owner-private object at the dispatcher door

claude

committed

120ae16

fix(plugin-sharing): the record owner and an explicit Modify-All holder may mint a share link without visibility (ADR-0111 D8 rule 1, ruling A')

claude

committed

50797ce

test(plugin-sharing,plugin-security): pin the ruled mint matrix beside the service and the owner alternative at the organization wall

claude

committed

ca1e94e

docs(adr-0111,docs): restate D8 rule 1 as ruled (A'), align its D-future sentence; who may mint in the share-link docs; changeset

claude

committed

b0382b1

Merge remote-tracking branch 'origin/main' into claude/issue-21329-share-link-mint-authority

claude

committed

6bf7f10

fix(plugin-sharing): createLink asks the mint probe without two new isSystem reads

claude

committed

41f8cf3

fix(plugin-sharing): a missing required capability is a hard stop the owner and Modify-All mint alternatives do not pass

claude

committed

7a70962

test(runtime): the capability hard stop at both share-link doors, with the capable-owner control

claude

committed

f0c82ea

docs(spec,adr-0111,docs): state who may mint in the IShareLinkService.createLink and ISharingService.canManageShares TSDoc; the capability hard stop in D8 rule 1; the Consequences line on hierarchy…

claude

committed

7a92586

chore(changeset): name the probe slice by the exported option that carries it

claude

committed

1031133

Navigation Menu

fix(plugin-sharing): the record owner and an explicit Modify-All holder may mint a share link without visibility (ADR-0111 D8 rule 1, ruling A′) - #21447

fix(plugin-sharing): the record owner and an explicit Modify-All holder may mint a share link without visibility (ADR-0111 D8 rule 1, ruling A′)#21447
os-zhuang merged 10 commits into
mainfrom
claude/issue-21329-share-link-mint-authority

Commits on Oct 2, 2026

test(runtime): pin share-link mint authority on an owner-private object at the dispatcher door

fix(plugin-sharing): the record owner and an explicit Modify-All holder may mint a share link without visibility (ADR-0111 D8 rule 1, ruling A')

test(plugin-sharing,plugin-security): pin the ruled mint matrix beside the service and the owner alternative at the organization wall

docs(adr-0111,docs): restate D8 rule 1 as ruled (A'), align its D-future sentence; who may mint in the share-link docs; changeset

Merge remote-tracking branch 'origin/main' into claude/issue-21329-share-link-mint-authority

fix(plugin-sharing): createLink asks the mint probe without two new isSystem reads

fix(plugin-sharing): a missing required capability is a hard stop the owner and Modify-All mint alternatives do not pass

test(runtime): the capability hard stop at both share-link doors, with the capable-owner control

docs(spec,adr-0111,docs): state who may mint in the IShareLinkService.createLink and ISharingService.canManageShares TSDoc; the capability hard stop in D8 rule 1; the Consequences line on hierarchy…

chore(changeset): name the probe slice by the exported option that carries it