Mention-grants: Collaborator-based cross-space access for @-mentions by MichaelUray · Pull Request #10895 · hcengineering/platform

feat(core): add ClassCollaborators.mentionsGrantAccess opt-in flag

MichaelUray

committed

feat(model/core): wire mentionsGrantAccess into TClassCollaborators model class

MichaelUray

committed

feat(tracker): opt tracker.class.Issue into collaborator-grants-read + mentions-grant-access

MichaelUray

committed

feat(core/collaborators): add isomorphic resolveMentionGrantTarget helper

MichaelUray

committed

feat(middleware/guest-permissions): veto field updates from collab-only guests on opt-in classes

MichaelUray

committed

feat(tracker/utils): split canEditIssue into canEditIssueFields + canCommentOnIssue

MichaelUray

committed

feat(tracker/EditIssue): show comment composer separately from field editors

MichaelUray

committed

fix(chunter-resources): add @hcengineering/text-core dependency

MichaelUray

committed

feat(chunter-trigger): mention-grants-access uses shared helper + grant-target dedup

MichaelUray

committed

feat(chunter/ChatMessageInput): warn before mention auto-grants Issue access

MichaelUray

committed

feat(middleware/spaceSecurity): let Guests read collab-secured docs across spaces

MichaelUray

committed

feat(security): allow non-System callers to read their own Collaborator records

MichaelUray

committed

feat(security+nav): list collab-only spaces in workbench navigator for Guests

MichaelUray

committed

fix(nav): surface collab-only projects in tracker nav-tree

MichaelUray

committed

fix(tracker/nav): hide non-Issues sub-nodes on non-member projects

MichaelUray

committed

feat(tracker/nav): V1 - badge + tooltip for collab-only projects

MichaelUray

committed

test(tracker): V2 - mention-grant persists after issue moves to Done

MichaelUray

committed

feat(text-core): V3a - grantsAccess attr on mention references

MichaelUray

committed

feat(chunter): V3b - per-grantee grant choices in send disclosure

MichaelUray

committed

feat(chunter-trigger): V3c - honour grantsAccess='false' on mentions

MichaelUray

committed

feat(chunter-trigger): V3d - add-only re-grant on message edit

MichaelUray

committed

fix(chunter-trigger): V3d update-grant uses the edit actor + add tests

MichaelUray

committed

fix(chunter): preserve unsent comment when grant dialog is cancelled

MichaelUray

committed

test(middleware): stub hierarchy.getAncestors for guest-permission uncovered-class test

MichaelUray

committed

fix(workbench-resources/Navigator): correct activeClasses cast to Ref<Class<Space>>[]

MichaelUray

committed

fix: self-review BLOCKERs + IMPORTANT findings

MichaelUray

committed

fix(tracker/V1): guard space.members against null

MichaelUray

committed

docs(tracker/V1): note scope limit on sub-node hide

MichaelUray

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Mention-grants: Collaborator-based cross-space access for @-mentions#10895

Mention-grants: Collaborator-based cross-space access for @-mentions#10895
MichaelUray wants to merge 28 commits into
hcengineering:developfrom
MichaelUray:feat/huly-mention-grants

Commits on May 30, 2026

feat(core): add ClassCollaborators.mentionsGrantAccess opt-in flag

feat(model/core): wire mentionsGrantAccess into TClassCollaborators model class

feat(tracker): opt tracker.class.Issue into collaborator-grants-read + mentions-grant-access

feat(core/collaborators): add isomorphic resolveMentionGrantTarget helper

feat(middleware/guest-permissions): veto field updates from collab-only guests on opt-in classes

feat(tracker/utils): split canEditIssue into canEditIssueFields + canCommentOnIssue

feat(tracker/EditIssue): show comment composer separately from field editors

fix(chunter-resources): add @hcengineering/text-core dependency

feat(chunter-trigger): mention-grants-access uses shared helper + grant-target dedup

feat(chunter/ChatMessageInput): warn before mention auto-grants Issue access

feat(middleware/spaceSecurity): let Guests read collab-secured docs across spaces

feat(security): allow non-System callers to read their own Collaborator records

feat(security+nav): list collab-only spaces in workbench navigator for Guests

fix(nav): surface collab-only projects in tracker nav-tree

fix(tracker/nav): hide non-Issues sub-nodes on non-member projects

feat(tracker/nav): V1 - badge + tooltip for collab-only projects

test(tracker): V2 - mention-grant persists after issue moves to Done

feat(text-core): V3a - grantsAccess attr on mention references

feat(chunter): V3b - per-grantee grant choices in send disclosure

feat(chunter-trigger): V3c - honour grantsAccess='false' on mentions

feat(chunter-trigger): V3d - add-only re-grant on message edit

fix(chunter-trigger): V3d update-grant uses the edit actor + add tests

fix(chunter): preserve unsent comment when grant dialog is cancelled

test(middleware): stub hierarchy.getAncestors for guest-permission uncovered-class test

fix(workbench-resources/Navigator): correct activeClasses cast to Ref<Class<Space>>[]

fix: self-review BLOCKERs + IMPORTANT findings

fix(tracker/V1): guard space.members against null

docs(tracker/V1): note scope limit on sub-node hide