Access Control Policies Page

[ElioNeto]

Access Control Policies Page

Create an Angular page for managing access control policies using the existing AccessController infrastructure.

Backend Endpoints Needed

GET    /admin/access/policies         — List all access policies
POST   /admin/access/policies         — Create a new policy
PUT    /admin/access/policies/{id}    — Update a policy
DELETE /admin/access/policies/{id}    — Delete a policy
GET    /admin/access/check/{key}      — Test access for current user

UI Requirements

Policy List

• Table: Policy name, effect (Allow/Deny), operation (Read/Write/Delete/Admin), key prefix, priority
• Sort: By priority (highest first)
• Filter: By operation or effect
• Status: Active/Inactive toggle

Policy Editor

• Name: Text input
• Effect: Toggle (Allow / Deny)
• Operation: Checkboxes (Read, Write, Delete, Admin)
• Key Prefix: Input with wildcard support
• Priority: Number input (higher = evaluated first)
• Roles/Tokens: Multi-select for associated roles

Test Panel

• Key Input: Enter a key to test
• Operation Select: Choose operation
• Result: Show Allow/Deny + which policy matched

Component Structure

app/
  pages/
    access-control/
      access-control.component.ts
      access-control.component.html
      access-control.component.scss
      policy-form.component.ts
      policy-form.component.html
      policy-form.component.scss

Acceptance Criteria

• Policy list loads and displays correctly
• New policy can be created
• Existing policy can be edited
• Policy can be deleted with confirmation
• Test panel evaluates correctly
• Error states for all operations
• Responsive layout

Parent Epic

#290

[ElioNeto]

Resolved via feat/notes-engine-v2 branch (PR #321) - commit closes via merge to main