Skip to content

Navigation Menu

Appearance settings

- AI CODE CREATION
  GitHub CopilotWrite better code with AI
  GitHub Copilot appDirect agents from issue to merge
  MCP Registry^NewIntegrate external tools
- DEVELOPER WORKFLOWS
  ActionsAutomate any workflow
  CodespacesInstant dev environments
  IssuesPlan and track work
  Code ReviewManage code changes
- APPLICATION SECURITY
  GitHub Advanced SecurityFind and fix vulnerabilities
  Code securitySecure your code as you build
  Secret protectionStop leaks before they start
- EXPLORE
  Why GitHub
  Documentation
  Blog
  Changelog
  Marketplace
View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

RocketChat / Rocket.Chat Public

Notifications You must be signed in to change notification settings
Fork 13.7k
Star 45.8k

Code
Issues 2.5k
Pull requests 1.4k
Discussions
Actions
Projects
Wiki
Security and quality 16
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Wiki
Security and quality
Insights

feat: Virtru as attribute store#40634

Merged

dionisio-bot[bot] merged 79 commits into

developRocketChat/Rocket.Chat:developfrom

feat/abac-virtru-attribute-storeRocketChat/Rocket.Chat:feat/abac-virtru-attribute-storeCopy head branch name to clipboard

Jun 3, 2026

Conversation Commits79 (79)Checks Files changed

Merged

feat: Virtru as attribute store#40634
dionisio-bot[bot] merged 79 commits into
developfrom
feat/abac-virtru-attribute-store

Commits

Commits on May 29, 2026

refactor(abac): extract pure virtru identity/FQN helpers
KevLehman
committed
refactor(abac): add shared VirtruClient (transport/auth/reachability)
KevLehman
committed
refactor(abac): harden VirtruClient getConfig + assert Bearer header in test
KevLehman
committed
refactor(abac): VirtruPDP delegates transport/identity to VirtruClient
KevLehman
committed
refactor(abac): remove dead VirtruPDP.updateConfig + tidy VirtruClient/config access
KevLehman
committed
chore(abac): add license dep + attribute-store-external error code
KevLehman
committed
feat(abac): define IAttributeStore + GetEntitlements types
KevLehman
committed
feat(abac): LocalAttributeStore (identity/no-op, zero behavior change)
KevLehman
committed
refactor(abac): tidy LocalAttributeStore filter condition + document no-op guard
KevLehman
committed
feat(abac): VirtruAttributeStore list/entitlements/validate (15s entity-keyed cache)
KevLehman
committed
fix(abac): evict VirtruAttributeStore entitlements cache on failure + typed entity-resolution error
KevLehman
committed
feat(abac): AbacService owns VirtruClient + effectiveStore/attribute-store selection
KevLehman
committed
chore(abac): self-contained boot-ordering comment + default lastEffectiveStore
KevLehman
committed
feat(abac): ABAC_Attribute_Store setting + listeners + license-up reeval
KevLehman
committed
refactor(abac): tidy attribute-store transition path + harden listener tests
KevLehman
committed
feat(abac): VirtruAttributeStore scopeRoomsPage + assertCanModifyRoom (fail-closed)
KevLehman
committed
test(abac): split assertCanModifyRoom into per-scenario cases
KevLehman
committed
feat(abac): redact denied rooms in listAbacRooms via attribute store
KevLehman
committed
feat(abac): 4-site assertCanModifyRoom + validateAssignable store swap
KevLehman
committed
test(abac): match mocked validateAssignable arity to interface
KevLehman
committed
feat(abac): block catalog CRUD in virtru attribute-store mode
KevLehman
committed
fix(abac): make isExternalAttributeStore async to match IAbacService
KevLehman
committed
feat(abac): serve attribute picker from store in virtru mode
KevLehman
committed
feat(abac): redact abacAttributes on rooms.adminRooms.getRoom via CE seam + EE patch
KevLehman
committed
fix(abac): use settings-gated isABACManagedRoom in admin-room redaction patch
KevLehman
committed
feat(abac): add abac.attribute_store.switched audit event type + helper
KevLehman
committed
feat(abac): transition-only destructive attribute wipe (license-gated, detached, idempotent)
KevLehman
committed
feat(abac): surface attribute_store.switched in /v1/abac/audit + Logs page
KevLehman
committed
feat(abac): hide Room Attributes tab in virtru attribute-store mode
KevLehman
committed
feat(abac): redacted-room Callout + read-only attribute section + picker helper
KevLehman
committed
test(abac): assert real DOM disability in RoomFormAttributeFields disabled tests
KevLehman
committed
test(abac): mock GetEntitlements for virtru attribute store e2e
KevLehman
committed
test(abac): e2e coverage for virtru attribute store
KevLehman
committed
feat(abac): show ABAC_Attribute_Store on the ABAC admin settings page
KevLehman
committed
feat(abac): symmetric attribute-store wipe with asymmetric trigger (reverse fires only on explicit Store setting opt-out)
KevLehman
committed
refactor(abac): scope attribute-store wipe to explicit Store-setting changes only
KevLehman
committed
feat(abac): cascade ABAC_Attribute_Store=local when ABAC_PDP_Type set to local
KevLehman
committed
refactor(abac): rename audit event key to dot-separated abac.attribute.store.switched
KevLehman
committed
move client to folder
KevLehman
committed
types
KevLehman
committed
minor improvements
KevLehman
committed
better error
KevLehman
committed
one audit less
KevLehman
committed
better caching
KevLehman
committed
log
KevLehman
committed
log malformed
KevLehman
committed
nits
KevLehman
committed
license
KevLehman
committed
fix(abac): seed hasAbacLicense from License service on start
KevLehman
committed
fix(abac): refresh license state on reevaluateAttributeStore
KevLehman
committed
fix(abac): resolve attribute store from a live license check
KevLehman
committed
chore(ci): propagate LOG_LEVEL to microservices
KevLehman
committed
fix(abac): treat failed decision calls as PDP-unavailable; fix e2e setup
KevLehman
committed
add validation to remove action
KevLehman
committed
simplify
KevLehman
committed
remove old license tests
KevLehman
committed
imp
KevLehman
committed
store selection
KevLehman
committed
tests
KevLehman
committed
wrong test
KevLehman
committed
log
KevLehman
committed
sec
KevLehman
committed
store transition
KevLehman
committed
Update index.ts
KevLehman
committed
fixes:
KevLehman
committed
fix tests
KevLehman
committed
staleTime 0 when using an external store
KevLehman
committed
tests
KevLehman
committed
lint
KevLehman
committed
scope room list
KevLehman
committed
remove superfluous tests
KevLehman
committed
unify
KevLehman
committed
merge hook
KevLehman
committed
simplify a lil bit
KevLehman
committed
turbo
KevLehman
committed
feat(abac): bypass-abac-store-validation permission (#40738)
KevLehman
authored

Commits on Jun 1, 2026

use hook
KevLehman
committed
Create khaki-gifts-follow.md
KevLehman
authored
use hook
KevLehman
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.