# Changelog

All notable changes to this project will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [1.0.0] - 2026-02-19

### Added
- Initial release of Multi-OrBAC PostgreSQL extension
- Complete Multi-OrBAC implementation based on CNRS research paper
- Core features:
  - Organization-centric access control
  - Role-based abstraction with organizational scope
  - Activity and view abstractions
  - Context-based rule evaluation
  - Four deontic modalities (permission, prohibition, obligation, recommendation)
  - Prohibition precedence over permissions
  - Multi-organization support
- Advanced features:
  - Organization, role, activity, and view hierarchies with transitive closure
  - Temporal delegation with time bounds
  - Temporal constraints on rules with validity periods (valid_from, valid_until)
  - Negative role assignments
  - Separation of Duty (SoD) constraints
  - Role cardinality constraints (min/max users)
  - Derived roles (computed via functions)
  - Cross-organizational rules with temporal support
  - Administration rules (meta-policies)
  - Audit logging for security-critical operations
- Audit logging system:
  - Generic audit trigger for tracking INSERT/UPDATE/DELETE operations
  - Comprehensive audit log with JSONB support for before/after states
  - Helper functions: `enable_audit()`, `disable_audit()`
  - Field-level change tracking
  - Client connection metadata capture (IP, application name, session user)
- Policy DSL with idempotent compiler
- RLS helper functions for PostgREST integration
- Comprehensive test suite with 20 test scenarios
- Complete documentation
- Build and installation automation (Makefile, install.sh)

[1.0.0]: https://github.com/yourusername/pg_morbac/releases/tag/v1.0.0