Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 12 additions & 3 deletions .changeset/adr-0057-erp-authz.md
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,25 @@
---
"@objectstack/platform-objects": major
"@objectstack/plugin-sharing": major
"@objectstack/spec": minor
"@objectstack/plugin-security": minor
"@objectstack/plugin-sharing": minor
"@objectstack/runtime": minor
"@objectstack/platform-objects": minor
"@objectstack/objectql": minor
"@objectstack/plugin-approvals": patch
---

**BREAKING:** the system object `sys_department` is renamed to `sys_business_unit`
— object + member table (`sys_department_member` → `sys_business_unit_member`),
fields, and i18n — with **no compatibility alias**. Any deployment holding
`sys_department` rows, or metadata that references the object by name (lookups,
list views, queries, sharing/approval scopes), must migrate to `sys_business_unit`.
A renamed shipped system object is a breaking change to the platform's public
data surface, so this lands as a **major**. Verified per ADR-0059's pre-publish
hotcrm gate: no published downstream consumer references the old name.

ADR-0057 — ERP authorization core. Adds permission-grant access DEPTH
(`own`/`own_and_reports`/`unit`/`unit_and_below`/`org`), renames `sys_department`
→ `sys_business_unit` (pre-launch, no aliases), introduces the platform-owned
→ `sys_business_unit` (no aliases — see BREAKING above), introduces the platform-owned
`sys_user_role` assignment, and seeds stack-declared `roles`/`sharingRules` into
`sys_role`/`sys_sharing_rule` at boot (closes #2077). Hierarchy-relative scopes are
delegated to a pluggable `IHierarchyScopeResolver` (open edition fails closed to
Expand Down
2 changes: 1 addition & 1 deletion .objectui-sha
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
c25964762fd63e1fefddbb87b3b9cfe6d1501927
70a56e15152c6e9ff602a9ff3675900e410531d7