A rule in a capability set can be added and deleted but never edited #114

New Issue

2026-09-21T07:18:34Z

cgalo5758 commented

2026-09-21 07:18:34 +00:00

The question

An entitlement set (the named bundle of rules a product delivers) offers two operations on its rules: add one, delete one. Changing a limit means deleting the rule and adding it again, which is a different act in the history and a different consequence for the organizations carrying the set. The rules also carry an active flag that no control changes and that the listing filters on, so a rule is either present or gone. Are rules edited in place, or replaced?

What depends on the answer

What the set's history records, and what the preview of a rule change has to describe. It is the same question as whether a set may change at all under the grants already carrying it, which is asked of the shared model rather than here: a set that is versioned instead of edited answers this one by construction.

Options known so far

Edit in place, with the change recorded as one act and the carrying pools recomputed from it, which is how a rule change already commits.
Replace: deleting and adding stays the only path, and the inactive flag is removed as a shape nothing uses.
Version the set, leaving existing grants on the version they were conferred from.

Decided when

The entitlements model says whether a rule is mutable, the set's surface offers exactly the operations that follow from it, and the unused flag is either wired to a control or dropped.

Migrated from status/issues.md at b7a0e15

## The question An entitlement set (the named bundle of rules a product delivers) offers two operations on its rules: add one, delete one. Changing a limit means deleting the rule and adding it again, which is a different act in the history and a different consequence for the organizations carrying the set. The rules also carry an active flag that no control changes and that the listing filters on, so a rule is either present or gone. Are rules edited in place, or replaced? ## What depends on the answer What the set's history records, and what the preview of a rule change has to describe. It is the same question as whether a set may change at all under the grants already carrying it, which is asked of the shared model rather than here: a set that is versioned instead of edited answers this one by construction. ## Options known so far - Edit in place, with the change recorded as one act and the carrying pools recomputed from it, which is how a rule change already commits. - Replace: deleting and adding stays the only path, and the inactive flag is removed as a shape nothing uses. - Version the set, leaving existing grants on the version they were conferred from. ## Decided when The entitlements model says whether a rule is mutable, the set's surface offers exactly the operations that follow from it, and the unused flag is either wired to a control or dropped. Migrated from status/issues.md at b7a0e15

cgalo5758 added the

kind

design

area/entitlements area/operator-ui labels 2026-09-21 07:18:34 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: wiki-cafe/member-console#114