Skip to content
This repository was archived by the owner on May 29, 2026. It is now read-only.

fix: resolve $now in raw SQL RBAC conditions, unblocking date-based access#1296

Merged
remko48 merged 1 commit into
developmentfrom
feature/git-1272/RBAC-sql-operand
Apr 21, 2026
Merged

fix: resolve $now in raw SQL RBAC conditions, unblocking date-based access#1296
remko48 merged 1 commit into
developmentfrom
feature/git-1272/RBAC-sql-operand

Conversation

@remko48

@remko48 remko48 commented Apr 21, 2026

Copy link
Copy Markdown
Member

Problem

Schema-level RBAC match conditions using $now (e.g. to gate public access on a publicatiedatum field) blocked all objects instead of only those without a publication date in the past.

"authorization": {
    "read": [
        { "group": "public", "match": { "publicatiedatum": { "$lte": "$now" } } }
    ]
}

…ccess

Co-authored-by: Robert Zondervan <robert@conduction.nl>
@remko48 remko48 force-pushed the feature/git-1272/RBAC-sql-operand branch from f57deef to abb7d1c Compare April 21, 2026 13:24
@github-actions

Copy link
Copy Markdown
Contributor

Quality Report — ConductionNL/openregister @ 1bd29e5

Check PHP Vue Security License Tests
lint
phpcs
phpmd
psalm
phpstan
phpmetrics
eslint
stylelint
composer ✅ 147/147
npm ✅ 599/599
PHPUnit
Newman
Playwright ⏭️

Quality workflow — 2026-04-21 13:24 UTC

Download the full PDF report from the workflow artifacts.

@github-actions

Copy link
Copy Markdown
Contributor

Quality Report — ConductionNL/openregister @ ef7b98f

Check PHP Vue Security License Tests
lint
phpcs
phpmd
psalm
phpstan
phpmetrics
eslint
stylelint
composer ✅ 147/147
npm ✅ 599/599
PHPUnit
Newman
Playwright ⏭️

Quality workflow — 2026-04-21 14:24 UTC

Download the full PDF report from the workflow artifacts.

@remko48 remko48 merged commit 404c973 into development Apr 21, 2026
33 of 41 checks passed
@remko48 remko48 deleted the feature/git-1272/RBAC-sql-operand branch April 21, 2026 14:24
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants