From 13d8ebd1c5f41dcfe2819dc91ffb9063aaab4a7b Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 17 Oct 2026 15:27:53 +0000 Subject: [PATCH 1/2] docs(adr-0056): AdminScopeSchema target shape lists only the live keys Co-authored-by: Claude Claude-Session: https://claude.ai/code/session_01XVp19E1MYUTFM3dnkwz8gB --- docs/adr/0056-permission-editing-studio.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/docs/adr/0056-permission-editing-studio.md b/docs/adr/0056-permission-editing-studio.md index b118c3f4af..bb214e814e 100644 --- a/docs/adr/0056-permission-editing-studio.md +++ b/docs/adr/0056-permission-editing-studio.md @@ -139,8 +139,9 @@ one total-but-raw (Setup, six JSON blobs). That overlap is the problem. object.** - **`AdminScopeSchema`** (ADR-0090 D12, in `permission.zod.ts`) — the exact target shape for the `admin_scope` editor: `businessUnit`, `includeSubtree`, - `manageAssignments`, `manageBindings`, `authorEnvironmentSets`, - `assignablePermissionSets[]`. + `manageAssignments`, `assignablePermissionSets[]`. `manageBindings` and + `authorEnvironmentSets` were retired by objectstack-ai/objectstack#23488 (the + spec refuses both). - **`RowLevelSecurityPolicySchema`** (`spec/security/rls.zod.ts`) — the target shape for the RLS editor: `name` / `object` / `operation` / `using` / `check` (CEL-style predicates). From 2e2c31bfbfde23368173a2edef879d14a12698b9 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 17 Oct 2026 15:36:25 +0000 Subject: [PATCH 2/2] docs(adr-0056): the P3 log names only the admin-scope controls the editor still carries Co-authored-by: Claude Claude-Session: https://claude.ai/code/session_01XVp19E1MYUTFM3dnkwz8gB --- docs/adr/0056-permission-editing-studio.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/adr/0056-permission-editing-studio.md b/docs/adr/0056-permission-editing-studio.md index bb214e814e..efb40a9acc 100644 --- a/docs/adr/0056-permission-editing-studio.md +++ b/docs/adr/0056-permission-editing-studio.md @@ -210,9 +210,10 @@ change framework source). editors (`PermissionAdvancedFacets`), collapsed by default below the object matrix: RLS per-policy rows (object · operation · enabled) with CEL USING/CHECK; tab visibility `visible | hidden | default_on | default_off`; delegated admin - scope (business-unit + subtree, manage-assignments / -bindings / author-env-sets - toggles, `assignablePermissionSets[]` allowlist). Each reads the draft's parsed - field, tolerating a JSON string on load so legacy rows survive. + scope (business-unit + subtree, manage-assignments toggle, + `assignablePermissionSets[]` allowlist; the -bindings / author-env-sets toggles + were removed with objectui#12659 when the spec retired those keys). Each reads + the draft's parsed field, tolerating a JSON string on load so legacy rows survive. - **P4 — Assignment moved out of the design editor.** ✅ With assignment on the Setup record page (P1b), `AssignedUsersSection` is removed from