Tim MöhlmannandGitHub fcb05fd561 feat(relational): command permission check (#10771) ...

# Which Problems Are Solved

There is no implementation of the permission framework in the new
command pattern. We risk forgetting permission options as we are already
migrating the service layer to the new pattern.

# How the Problems Are Solved

Use an permission checker interface, which will be a sub-interface of
the Permission Repository. The permission checker is passed in the
command executor and invoker as part of the command options. From here
the implementation can call the correct permission method.

This PR proposes a check method for each
[level](https://github.com/zitadel/zitadel/wiki/Internal-AuthZ#levels).

# Additional Changes

- none 

# Additional Context

- Draft design:
https://github.com/zitadel/zitadel/wiki/Internal-AuthZ#enforcement
- Related for queries: https://github.com/zitadel/zitadel/pull/10756

2025-10-13 17:04:39 +02:00

..

v3

feat(relational): command permission check (#10771)

2025-10-13 17:04:39 +02:00

main.go

feat(backend): state persisted objects (#9870)

2025-09-05 09:54:34 +01:00