SaelixCode 74cbff039f fix(sso): preserve granular roles across enabled role synchronization ...

Extend the sso_role_sync condition in SSOService.provisionUser so the
IdP-derived role is applied only while the stored role is Admin or Viewer.
Granular roles (deployer, node-admin, auditor) remain manually
authoritative. Replace the misleading inline comment with one accurate
block explaining the setting gate, coarse-role sync, granular-role
preservation, and independent email sync.

Backed by parameterized regression tests for all three granular roles.

2026-08-30 20:20:07 -04:00

..

api-reference

feat(security): add triage status and OpenVEX justification parity (#1615)

2026-07-11 19:26:26 -04:00

features

fix(sso): preserve granular roles across enabled role synchronization

2026-08-30 20:20:07 -04:00

getting-started

fix(sso): preserve granular roles across enabled role synchronization

2026-08-30 20:20:07 -04:00

images

feat(git): SSH deploy keys with strict host-key verification (#1867)

2026-08-29 16:52:32 -04:00

operations

feat(fleet): detect and update from a new sencho-dev:dev build (#1871)

2026-08-30 15:54:19 -04:00

reference

fix(sso): enforce hub-only SSO config when remote node is active (#1865)

2026-08-29 20:10:26 -04:00

tutorials

feat(gitops): resolve branch, tag, and SHA refs to immutable commits before fetch (#1864)

2026-08-28 16:15:37 -04:00

custom.css

docs: align documentation theme with Sencho app branding (#199)

2026-03-27 18:44:37 -04:00

docs.json

docs: write Give a Teammate Deploy Access to One Stack tutorial (#1800)

2026-08-08 13:12:45 -04:00

MIGRATION_VERIFIED.md

chore: verify docs sync in new organization

2026-04-29 15:53:45 -04:00

openapi.yaml

fix(security): tie fixable CVE posture to image-update evidence (#1815)

2026-08-12 15:02:14 -04:00