feat(knowledge): administrator access mode with mirrored source permissions - #7477

Draft

waleedlatif1 wants to merge 20 commits into

stagingfrom

feat/connector-service-account-auth

Commits on Sep 4, 2026

feat(knowledge): resolve connector tokens through one service-account-aware resolver
waleedlatif1
committed
77abaf3
feat(knowledge): map Google Drive permissions to document access tokens
waleedlatif1
committed
d21f661
feat(knowledge): write mirrored document ACLs without re-embedding
waleedlatif1
committed
a73add1
feat(knowledge): crawl Google Drive as an administrator and mirror its permissions
waleedlatif1
committed
4c0e817
fix(knowledge): make one email address mean one account
waleedlatif1
committed
0fd6df2
feat(knowledge): resolve directory groups so mirrored grants reach the right people
waleedlatif1
committed
140c772
feat(knowledge): let a connector be put into administrator mode
waleedlatif1
committed
64053e8
fix(knowledge): gate mirrored access on its own feature, not on Credential Groups
waleedlatif1
committed
3053ec4
refactor(knowledge): drop directory-group columns nothing reads
waleedlatif1
committed
faab96f
feat(knowledge): mirror Confluence space permissions and page restrictions
waleedlatif1
committed
972422f
feat(knowledge): refresh mirrored directories on their own clock
waleedlatif1
committed
de993af
fix(knowledge): close two admin-mode gaps found in an architecture audit
waleedlatif1
committed
9e68ad3
fix(knowledge): read shared-drive permissions, and finish a pending switch before mirroring
waleedlatif1
committed
8932ca2
docs(knowledge): state why the ACL ceiling exists rather than where the number came from
waleedlatif1
committed
7ecdc94
chore(knowledge): register the directory-sync cron, and collapse the two migrations into one
waleedlatif1
committed
822625b
refactor(auth): one email fold, in SQL and TypeScript, and no reads of the dead column
waleedlatif1
committed
8ca4ff1
fix(knowledge): Drive field mask named a permission field that does not exist
waleedlatif1
committed
cc92806
fix(knowledge): close the audit findings on administrator access
waleedlatif1
committed
2c86087
refactor(knowledge): tighten administrator access after the mechanics review
waleedlatif1
committed
6f204a0
refactor(knowledge): collapse the access-mode vocabulary and the duplication around it
waleedlatif1
committed
399149c

Navigation Menu

Uh oh!

feat(knowledge): administrator access mode with mirrored source permissions - #7477

feat(knowledge): administrator access mode with mirrored source permissions#7477
waleedlatif1 wants to merge 20 commits into
stagingfrom
feat/connector-service-account-auth

Commits on Sep 4, 2026

feat(knowledge): resolve connector tokens through one service-account-aware resolver

feat(knowledge): map Google Drive permissions to document access tokens

feat(knowledge): write mirrored document ACLs without re-embedding

feat(knowledge): crawl Google Drive as an administrator and mirror its permissions

fix(knowledge): make one email address mean one account

feat(knowledge): resolve directory groups so mirrored grants reach the right people

feat(knowledge): let a connector be put into administrator mode

fix(knowledge): gate mirrored access on its own feature, not on Credential Groups

refactor(knowledge): drop directory-group columns nothing reads

feat(knowledge): mirror Confluence space permissions and page restrictions

feat(knowledge): refresh mirrored directories on their own clock

fix(knowledge): close two admin-mode gaps found in an architecture audit

fix(knowledge): read shared-drive permissions, and finish a pending switch before mirroring

docs(knowledge): state why the ACL ceiling exists rather than where the number came from

chore(knowledge): register the directory-sync cron, and collapse the two migrations into one

refactor(auth): one email fold, in SQL and TypeScript, and no reads of the dead column

fix(knowledge): Drive field mask named a permission field that does not exist

fix(knowledge): close the audit findings on administrator access

refactor(knowledge): tighten administrator access after the mechanics review

refactor(knowledge): collapse the access-mode vocabulary and the duplication around it