docs(guide): institution create/delete is BCOS-only; MSP submits a request (msp#29) #20

2026-07-15T15:59:38-04:00

hiveiq commented

2026-07-15 15:59:38 -04:00

Updates the Guide to match the new authz: only BCOS can add/delete an institution; MSP admins edit only and submit a request to BCOS to add/remove one. Covers msp.institution-keys (Customer/Internal/Claude/Testing) + technical.devices. Refs hiveops-msp#29. Guide is develop-only — deploy to bcos.dev on your go. 🤖 Generated with Claude Code

Updates the Guide to match the new authz: only BCOS can add/delete an institution; MSP admins edit only and **submit a request to BCOS** to add/remove one. Covers msp.institution-keys (Customer/Internal/Claude/Testing) + technical.devices. Refs hiveops-msp#29. Guide is develop-only — deploy to bcos.dev on your go. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

hiveiq added 1 commit 2026-07-15 15:59:39 -04:00

docs(guide): institution create/delete is BCOS-only; MSP submits a request (msp#29) 9cfb085339

Update the msp.institution-keys module (Customer/Internal/Claude/Testing tabs)
and technical.devices to match the new authz:
- Only BCOS_ADMIN can create/delete institution keys; MSP admins edit only and
  must submit a request to BCOS to add/remove an institution.
- POST/DELETE /api/institution-keys -> hasRole('BCOS_ADMIN'); PUT stays MSP+BCOS.
- Note the underlying ownership gap (devices mints institutions with no mgmt
  mirror; keys have diverged) tracked in msp#29.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

johannes approved these changes 2026-07-15 16:02:34 -04:00

hiveiq merged commit a1c8a09406 into develop

2026-07-15 16:03:12 -04:00

hiveiq deleted branch docs/institution-keys-bcos-only

2026-07-15 16:04:26 -04:00

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: hiveiq-src/hiveops-guide#20