AdminGit2026/nis2-agile
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[FEAT] A4 Fase 4.1 — Organigramma (org_roles): ruoli/gerarchia + nodo governance Art.23

Browse Source 
Primo modulo del modello relazionale A4 (docs/DESIGN_A4_RELATIONAL.md).

Backend:
- Migration 041 (docs/sql/041_org_roles.sql) + runner scripts/migrate-a4.php.
  Tabella org_roles additiva/idempotente: gerarchia self-FK (parent_role_id),
  titolare (holder_user_id), is_governance_body (organi amministrazione/direttivi
  Art.23 D.Lgs.138/2024), description (GV.RR-02). APPLICATA su prod (container
  nis2-db v8.0.45, TLSv1.3, 11 col, 4 FK).
- OrgRoleController: list (flat+tree arricchiti), get, create, update, delete,
  assignableUsers. Multi-tenancy ancorata a getCurrentOrgId(), anti-IDOR
  (id+organization_id), prevenzione cicli nella gerarchia, holder = membro org,
  delete bloccato se ha figli (409). Route registrate in public/index.php.

Frontend:
- public/organigramma.html + js/organigramma.js: vista ad albero (badge governance,
  titolare/vacante), editor crea/modifica/elimina con select padre anti-ciclo,
  "crea struttura di base". Bootstrap Italia V2.
- Voce sidebar "Organigramma" (common.js + common-bi.js) + nav.org_chart i18n IT/EN.
- api.js: metodi orgRole* (wrapper _acn).

Help/KB:
- help.js: guida contestuale 'org' (cosa rappresenta, nodo Art.23, come si usa,
  fonti certe D.Lgs.138/2024 art.23 + GV.RR-02 best practice, disclaimer no-parere-legale).

Cache-buster: bump ?v=20260617 dei 5 JS condivisi su tutte le 32 HTML referenti.
version.json 1.15.2 -> 1.16.0. Smoke E2E su prod (fpm reale): login, CRUD, tree,
anti-ciclo (422), delete-con-figli (409), cleanup tutti verdi.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
DevEnv nis2-agile
2026-06-15 18:05:56 +02:00
co-authored by Claude Opus 4.8
parent dcb9a14f0f
commit 8540b53cb2
44 changed files with 994 additions and 126 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public/_app-bi-demo.html
+3 -3
View File
@@ -70,9 +70,9 @@
</script>
<!-- Stessa logica della app: api.js + common.js (helper) + common-bi.js (override BI) -->
<script src="js/api.js?v=20260613"></script>
<script src="js/common.js?v=20260615"></script>
<script src="js/common-bi.js?v=20260615"></script>
<script src="js/api.js?v=20260617"></script>
<script src="js/common.js?v=20260617"></script>
<script src="js/common-bi.js?v=20260617"></script>
<script>
// Renderizza la sidebar BI (loadSidebar è stato ridefinito da common-bi.js)
document.addEventListener('DOMContentLoaded', function () {
public/acn-gap.html
+5 -5
View File
@@ -152,8 +152,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -163,9 +163,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
'use strict';
const FUNC_LABELS = {
public/admin/index.html
+4 -4
View File
@@ -317,8 +317,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -328,8 +328,8 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script>
// ── Auth check ───────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/admin/organizations.html
+4 -4
View File
@@ -147,8 +147,8 @@
</main>
</div>
<script src="../js/api.js?v=20260613"></script>
<script src="../js/common.js?v=20260615"></script>
<script src="../js/api.js?v=20260617"></script>
<script src="../js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -158,8 +158,8 @@
bootstrap.loadFonts('../vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="../js/common-bi.js?v=20260615"></script>
<script src="../js/i18n.js?v=20260615"></script>
<script src="../js/common-bi.js?v=20260617"></script>
<script src="../js/i18n.js?v=20260617"></script>
<script>
// ── Auth check ───────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/admin/users.html
+4 -4
View File
@@ -169,8 +169,8 @@
</main>
</div>
<script src="../js/api.js?v=20260613"></script>
<script src="../js/common.js?v=20260615"></script>
<script src="../js/api.js?v=20260617"></script>
<script src="../js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -180,8 +180,8 @@
bootstrap.loadFonts('../vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="../js/common-bi.js?v=20260615"></script>
<script src="../js/i18n.js?v=20260615"></script>
<script src="../js/common-bi.js?v=20260617"></script>
<script src="../js/i18n.js?v=20260617"></script>
<script>
// ── Auth check ───────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/architecture.html
+4 -4
View File
@@ -1088,10 +1088,10 @@
</main>
</div>
<script src="js/api.js?v=20260613"></script>
<script src="js/common.js?v=20260615"></script>
<script src="js/i18n.js?v=20260615"></script>
<script src="js/help.js?v=20260616"></script>
<script src="js/api.js?v=20260617"></script>
<script src="js/common.js?v=20260617"></script>
<script src="js/i18n.js?v=20260617"></script>
<script src="js/help.js?v=20260617"></script>
<script>
if (!checkAuth()) throw new Error('Not authenticated');
loadSidebar();
public/assessment.html
+5 -5
View File
@@ -154,8 +154,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -165,9 +165,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// ── Auth check ───────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/assets.html
+5 -5
View File
@@ -366,8 +366,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -377,9 +377,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// ── Auth & Init ─────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/companies.html
+5 -5
View File
@@ -349,14 +349,14 @@
</main>
</div>
<script src="js/api.js?v=20260613"></script>
<script src="js/common.js?v=20260615"></script>
<script src="js/api.js?v=20260617"></script>
<script src="js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle + override sidebar BI (common-bi.js dopo common.js: ridefinisce solo loadSidebar) -->
<script src="vendor/bootstrap-italia/dist/js/bootstrap-italia.bundle.min.js"></script>
<script>if (window.bootstrap && bootstrap.loadFonts) { bootstrap.loadFonts('vendor/bootstrap-italia/dist/fonts'); }</script>
<script src="js/common-bi.js?v=20260615"></script>
<script src="js/i18n.js?v=20260615"></script>
<script src="js/help.js?v=20260616"></script>
<script src="js/common-bi.js?v=20260617"></script>
<script src="js/i18n.js?v=20260617"></script>
<script src="js/help.js?v=20260617"></script>
<script>
if (!checkAuth()) throw new Error('Not authenticated');
public/cross-analysis.html
+4 -4
View File
@@ -382,8 +382,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -393,8 +393,8 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script>
const SPRITE = '/vendor/bootstrap-italia/dist/svg/sprites.svg';
function ico(name, cls) { return `<svg class="ico ${cls||''}" aria-hidden="true"><use href="${SPRITE}#${name}"></use></svg>`; }
public/dashboard.html
+5 -5
View File
@@ -143,8 +143,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -154,9 +154,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// ── Auth check ───────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/forgot-password.html
+1 -1
View File
@@ -73,7 +73,7 @@
</script>
<!-- Stessa logica della forgot-password.html: ZERO modifiche backend -->
<script src="js/api.js?v=20260613"></script>
<script src="js/api.js?v=20260617"></script>
<script>
const form = document.getElementById('forgot-form');
const err = document.getElementById('err');
public/guida.html
+5 -5
View File
@@ -1142,8 +1142,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (accordion) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI. -->
<script src="/vendor/bootstrap-italia/dist/js/bootstrap-italia.bundle.min.js"></script>
@@ -1152,9 +1152,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// La guida è accessibile anche da non autenticati (utile per onboarding)
// ma se sei loggato carichi sidebar + i18n normalmente. Stessa logica
public/incidents.html
+5 -5
View File
@@ -351,8 +351,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -362,9 +362,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// ── Auth & Init ──────────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/index.php
+11
View File
@@ -86,6 +86,7 @@ $subResourceId = isset($parts[4]) ? $parts[4] : null;
$controllerMap = [
'auth' => 'AuthController',
'organizations' => 'OrganizationController',
'org-roles' => 'OrgRoleController', // A4 Fase 4.1 — Organigramma (ruoli/gerarchia, Art.23 governance)
'assessments' => 'AssessmentController',
'acn-gap' => 'AcnAssessmentController', // Gap Analysis ACN (Det. 164179/2025, misure/requisiti)
'isms' => 'IsmsModelController', // Modello Organizzativo SGSI (ISO 27001/27017/27018 + SoA)
@@ -193,6 +194,16 @@ $actionMap = [
'DELETE:{id}/connectors' => 'deleteConnector',
],
// ── OrgRoleController — Organigramma (A4 Fase 4.1) ──
'org-roles' => [
'GET:list' => 'list',
'GET:assignableUsers' => 'assignableUsers',
'POST:create' => 'create',
'GET:{id}' => 'get',
'PUT:{id}' => 'update',
'DELETE:{id}' => 'delete',
],
// ── AssessmentController ────────────────────────
'assessments' => [
'GET:list' => 'list',
public/integrazioniext.html
+2 -2
View File
@@ -910,8 +910,8 @@ curl -H <span class="str">"X-API-Key: nis2_TUA_CHIAVE"</span> \
</main>
<script src="js/common.js?v=20260615"></script>
<script src="js/i18n.js?v=20260615"></script>
<script src="js/common.js?v=20260617"></script>
<script src="js/i18n.js?v=20260617"></script>
<script>
function showTab(id) {
document.querySelectorAll('.tab-btn').forEach((b, i) => {
public/isms.html
+5 -5
View File
@@ -184,8 +184,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -195,9 +195,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script src="/js/isms.js"></script>
</body>
</html>
public/js/api.js
+11
View File
@@ -224,6 +224,17 @@ class NIS2API {
ismsReadiness() { return this._acn(this.get('/isms/readiness')); }
ismsExport() { return this._acn(this.get('/isms/export')); }
// ═══════════════════════════════════════════════════════════════════
// Organigramma (A4 Fase 4.1) — ruoli/gerarchia + nodo governance (Art.23).
// Stesso contratto degli acn*/isms*: ritornano `data`, lanciano su success=false.
// ═══════════════════════════════════════════════════════════════════
orgRolesList() { return this._acn(this.get('/org-roles/list')); }
orgRolesAssignableUsers() { return this._acn(this.get('/org-roles/assignable-users')); }
orgRoleGet(id) { return this._acn(this.get(`/org-roles/${id}`)); }
orgRoleCreate(data) { return this._acn(this.post('/org-roles/create', data || {})); }
orgRoleUpdate(id, data) { return this._acn(this.put(`/org-roles/${id}`, data)); }
orgRoleDelete(id) { return this._acn(this.del(`/org-roles/${id}`)); }
// ═══════════════════════════════════════════════════════════════════
// Dashboard
// ═══════════════════════════════════════════════════════════════════
public/js/common-bi.js
+3 -1
View File
@@ -37,7 +37,8 @@
'assets.html': 'assets.html',
'reports.html': 'reports.html',
'settings.html': 'settings.html',
'whistleblowing.html': 'whistleblowing.html'
'whistleblowing.html': 'whistleblowing.html',
'organigramma.html': 'organigramma.html'
};
function biHref(href) {
@@ -69,6 +70,7 @@
{
label: 'Gestione', i18nKey: 'nav.management',
items: [
{ name: 'Organigramma', href: 'organigramma.html', icon: '<svg viewBox="0 0 20 20" fill="currentColor"><path d="M8 2.5h4a.5.5 0 01.5.5v2a.5.5 0 01-.5.5h-1.25v2.5H15a.5.5 0 01.5.5v1.25H17a.5.5 0 01.5.5v3a.5.5 0 01-.5.5h-4a.5.5 0 01-.5-.5v-3a.5.5 0 01.5-.5h1.25V9.5H6v1.25H7.5a.5.5 0 01.5.5v3a.5.5 0 01-.5.5h-4a.5.5 0 01-.5-.5v-3a.5.5 0 01.5-.5H4.5V9.5a.5.5 0 01.5-.5h4.75V6H8a.5.5 0 01-.5-.5V3a.5.5 0 01.5-.5z"/></svg>', i18nKey: 'nav.org_chart' },
{ name: 'Rischi', href: 'risks.html', icon: iconShieldExclamation(), i18nKey: 'nav.risks' },
{ name: 'Incidenti', href: 'incidents.html', icon: iconBell(), i18nKey: 'nav.incidents' },
{ name: 'Policy', href: 'policies.html', icon: iconDocumentText(), i18nKey: 'nav.policies' },
public/js/common.js
+1
View File
@@ -195,6 +195,7 @@ function loadSidebar() {
{
label: 'Gestione', i18nKey: 'nav.management',
items: [
{ name: 'Organigramma', href: 'organigramma.html', icon: `<svg viewBox="0 0 20 20" fill="currentColor"><path d="M8 2.5h4a.5.5 0 01.5.5v2a.5.5 0 01-.5.5h-1.25v2.5H15a.5.5 0 01.5.5v1.25H17a.5.5 0 01.5.5v3a.5.5 0 01-.5.5h-4a.5.5 0 01-.5-.5v-3a.5.5 0 01.5-.5h1.25V9.5H6v1.25H7.5a.5.5 0 01.5.5v3a.5.5 0 01-.5.5h-4a.5.5 0 01-.5-.5v-3a.5.5 0 01.5-.5H4.5V9.5a.5.5 0 01.5-.5h4.75V6H8a.5.5 0 01-.5-.5V3a.5.5 0 01.5-.5z"/></svg>`, i18nKey: 'nav.org_chart' },
{ name: 'Rischi', href: 'risks.html', icon: iconShieldExclamation(), i18nKey: 'nav.risks' },
{ name: 'Incidenti', href: 'incidents.html', icon: iconBell(), i18nKey: 'nav.incidents' },
{ name: 'Policy', href: 'policies.html', icon: iconDocumentText(), i18nKey: 'nav.policies' },
public/js/help.js
+39
View File
@@ -201,6 +201,43 @@ const HelpSystem = (function () {
]
},
// ─── Organigramma (A4 Fase 4.1) ──────────────────────────────
'org': {
title: 'Guida - Organigramma',
intro: 'L\'Organigramma mappa chi e responsabile di cosa: i ruoli dell\'organizzazione, la loro gerarchia, il titolare di ciascun ruolo e — distinto — il nodo degli organi di amministrazione e direttivi. E\' la base del modello relazionale: nelle fasi successive i ruoli verranno collegati a competenze, procedure, inventario e rischi tramite la matrice RACI. E\' uno strumento di supporto organizzativo, non un parere legale.',
sections: [
{
heading: 'Cosa rappresenta',
items: [
'<strong>Ruolo</strong>: una posizione organizzativa (es. CISO, Responsabile IT, DPO). Puo avere un <strong>titolare</strong> (un utente dell\'organizzazione) oppure restare vacante.',
'<strong>Gerarchia</strong>: ogni ruolo puo avere un ruolo "padre" (a chi riporta). I ruoli senza padre sono i nodi radice dell\'organigramma.',
'<strong>Responsabilita e poteri</strong>: il campo descrizione documenta cosa fa il ruolo, coerentemente con la buona prassi GV.RR-02 (ruoli, responsabilita e poteri stabiliti e comunicati).'
]
},
{
heading: 'Il nodo "Organi di amministrazione e direttivi" (Art. 23)',
items: [
'Marca come <strong>organo di governance</strong> il ruolo che rappresenta gli organi di amministrazione e direttivi: l\'<strong>art. 23 del D.Lgs. 138/2024</strong> ne stabilisce la responsabilita nell\'approvare le misure di gestione del rischio e nel sovrintendere alla loro attuazione.',
'Tenere questo nodo distinto rende dimostrabile in audit "chi approva" le misure e su chi ricade la responsabilita di vigilanza.',
'Gli organi di gestione sono inoltre tenuti a seguire una <strong>formazione</strong> specifica in materia di sicurezza informatica (gestita nel modulo Formazione).'
]
},
{
heading: 'Come si usa',
items: [
'<strong>Nuovo ruolo</strong>: indica il nome, l\'eventuale ruolo padre, il titolare e — se pertinente — la spunta "organo di governance".',
'Puoi modificare un ruolo o spostarlo nella gerarchia cambiandone il padre (il sistema impedisce di creare cicli).',
'Un ruolo non puo essere eliminato se ha ruoli subordinati: riassegna prima i figli a un altro ruolo.'
]
}
],
references: [
'D.Lgs. 138/2024, art. 23 - Responsabilita degli organi di amministrazione e direttivi (governance)',
'NIST CSF 2.0 / GV.RR-02 (best practice) - Ruoli, responsabilita e poteri stabiliti e comunicati',
'NOTA: gli obblighi normativi in Italia derivano da NIS2 (Dir. UE 2022/2555) e dal D.Lgs. 138/2024; framework e organigrammi sono strumenti di supporto, non un parere legale.'
]
},
// ─── Risk Management ─────────────────────────────────────────
'risks': {
title: 'Guida - Gestione Rischi',
@@ -1039,6 +1076,8 @@ const HelpSystem = (function () {
'acn': 'acn',
'isms.html': 'isms',
'isms': 'isms',
'organigramma.html': 'org',
'organigramma': 'org',
'risks.html': 'risks',
'risks': 'risks',
'incidents.html': 'incidents',
public/js/i18n.js
+4
View File
@@ -78,6 +78,10 @@ const I18n = (function () {
'isms.s6.hint': { it: 'Gli audit interni e le non conformità si gestiscono nei moduli esistenti: Audit & Report e NCR/CAPA.', en: 'Internal audits and non-conformities are managed in the existing modules: Audit & Reports and NCR/CAPA.' },
'isms.s6.readiness': { it: 'Completamento del SGSI', en: 'ISMS completion' },
'nav.management': { it: 'Gestione', en: 'Management' },
'nav.org_chart': { it: 'Organigramma', en: 'Org Chart' },
'org.title': { it: 'Organigramma', en: 'Org Chart' },
'org.subtitle': { it: 'Ruoli, responsabilità e organi di governance', en: 'Roles, responsibilities and governance bodies' },
'org.new_role': { it: 'Nuovo ruolo', en: 'New role' },
'nav.risks': { it: 'Rischi', en: 'Risks' },
'nav.incidents': { it: 'Incidenti', en: 'Incidents' },
'nav.policies': { it: 'Policy', en: 'Policies' },
public/js/organigramma.js
+209
View File
@@ -0,0 +1,209 @@
/**
* NIS2 Agile - Organigramma (A4 Fase 4.1)
* Vista ad albero dei ruoli organizzativi + editor (crea/modifica/elimina).
* Client api.orgRole*: ritorna `data`, lancia su success=false (vedi api.js _acn).
* Nodo "organo di governance" = Art. 23 D.Lgs. 138/2024.
*/
'use strict';
let ORG = { roles: [], users: [], tree: [] };
function el(id) { return document.getElementById(id); }
function esc(s) { const d = document.createElement('div'); d.textContent = (s == null ? '' : String(s)); return d.innerHTML; }
document.addEventListener('DOMContentLoaded', async function () {
if (typeof checkAuth === 'function' && !checkAuth()) return;
if (window.I18n && I18n.init) I18n.init('it');
if (typeof loadSidebar === 'function') loadSidebar();
if (window.HelpSystem && HelpSystem.init) HelpSystem.init();
// Chiudi la modale con ESC e con click sull'overlay.
document.addEventListener('keydown', function (e) { if (e.key === 'Escape') orgCloseModal(); });
const ov = el('org-modal');
if (ov) ov.addEventListener('click', function (e) { if (e.target === ov) orgCloseModal(); });
await orgLoadAll();
});
async function orgLoadAll() {
try {
const [data, users] = await Promise.all([
api.orgRolesList(),
api.orgRolesAssignableUsers()
]);
ORG.roles = data.roles || [];
ORG.tree = data.tree || [];
ORG.users = Array.isArray(users) ? users : [];
orgRender();
} catch (e) {
showNotification('Errore nel caricamento dell\'organigramma: ' + (e.message || e), 'error');
}
}
function orgRender() {
const tree = el('org-tree');
const empty = el('org-empty');
const stats = el('org-stats');
if (!ORG.roles.length) {
tree.innerHTML = '';
empty.style.display = 'block';
stats.style.display = 'none';
return;
}
empty.style.display = 'none';
// Statistiche
const gov = ORG.roles.filter(r => r.is_governance_body).length;
const vacant = ORG.roles.filter(r => !r.holder_user_id).length;
el('org-stat-total').textContent = ORG.roles.length;
el('org-stat-gov').textContent = gov;
el('org-stat-vacant').textContent = vacant;
stats.style.display = 'flex';
tree.innerHTML = ORG.tree.map(orgNodeHtml).join('');
}
function orgNodeHtml(node) {
const gov = node.is_governance_body;
const holder = node.holder_name
? '<div class="org-holder">👤 ' + esc(node.holder_name) + '</div>'
: '<div class="org-holder vacant">Ruolo vacante</div>';
const desc = node.description ? '<div class="org-desc">' + esc(node.description) + '</div>' : '';
const govBadge = gov ? '<span class="org-badge gov" title="Organo di amministrazione/direttivo (art. 23 D.Lgs. 138/2024)">Governance · Art. 23</span>' : '';
const children = (node.children && node.children.length)
? '<div class="org-children">' + node.children.map(orgNodeHtml).join('') + '</div>'
: '';
return '' +
'<div class="org-node">' +
'<div class="org-card' + (gov ? ' gov' : '') + '">' +
'<div class="org-card-main">' +
'<div class="org-role-name">' + esc(node.role_name) + govBadge + '</div>' +
holder + desc +
'</div>' +
'<div class="org-actions">' +
'<button class="btn btn-outline" onclick="orgOpenModal(' + node.id + ')" title="Modifica">Modifica</button>' +
'<button class="btn btn-outline" onclick="orgOpenModal(null,' + node.id + ')" title="Aggiungi subordinato">+ Subordinato</button>' +
'<button class="btn btn-outline" onclick="orgDeleteRole(' + node.id + ')" title="Elimina">Elimina</button>' +
'</div>' +
'</div>' +
children +
'</div>';
}
/** Insieme degli id discendenti di un ruolo (per escluderli dalla select padre). */
function orgDescendants(roleId) {
const out = new Set();
const stack = [roleId];
while (stack.length) {
const cur = stack.pop();
ORG.roles.forEach(r => {
if (r.parent_role_id === cur && !out.has(r.id)) { out.add(r.id); stack.push(r.id); }
});
}
return out;
}
/**
* Apre la modale. editId => modifica; parentId => crea un subordinato di parentId.
*/
function orgOpenModal(editId, parentId) {
const role = editId ? ORG.roles.find(r => r.id === editId) : null;
el('org-modal-title').textContent = role ? 'Modifica ruolo' : 'Nuovo ruolo';
el('org-f-id').value = role ? role.id : '';
el('org-f-name').value = role ? role.role_name : '';
el('org-f-desc').value = role ? (role.description || '') : '';
el('org-f-gov').checked = role ? !!role.is_governance_body : false;
el('org-f-err').textContent = '';
// Select padre — escludi se stesso e i suoi discendenti (anti-ciclo lato UI).
const exclude = role ? orgDescendants(role.id) : new Set();
if (role) exclude.add(role.id);
const parentSel = el('org-f-parent');
parentSel.innerHTML = '<option value="">— Nessuno (nodo radice) —</option>' +
ORG.roles.filter(r => !exclude.has(r.id))
.map(r => '<option value="' + r.id + '">' + esc(r.role_name) + '</option>').join('');
const selParent = role ? role.parent_role_id : (parentId || '');
parentSel.value = selParent ? String(selParent) : '';
// Select titolare
const holderSel = el('org-f-holder');
holderSel.innerHTML = '<option value="">— Vacante —</option>' +
ORG.users.map(u => '<option value="' + u.id + '">' + esc(u.full_name || u.email) + '</option>').join('');
holderSel.value = (role && role.holder_user_id) ? String(role.holder_user_id) : '';
el('org-modal').classList.add('open');
setTimeout(() => el('org-f-name').focus(), 50);
}
function orgCloseModal() {
const m = el('org-modal');
if (m) m.classList.remove('open');
}
async function orgSaveRole() {
const id = el('org-f-id').value;
const name = el('org-f-name').value.trim();
if (!name) { el('org-f-err').textContent = 'Il nome del ruolo è obbligatorio.'; return; }
const payload = {
role_name: name,
parent_role_id: el('org-f-parent').value || null,
holder_user_id: el('org-f-holder').value || null,
is_governance_body: el('org-f-gov').checked ? 1 : 0,
description: el('org-f-desc').value.trim()
};
const btn = el('org-f-save');
btn.disabled = true;
try {
if (id) {
await api.orgRoleUpdate(parseInt(id, 10), payload);
showNotification('Ruolo aggiornato.', 'success');
} else {
await api.orgRoleCreate(payload);
showNotification('Ruolo creato.', 'success');
}
orgCloseModal();
await orgLoadAll();
} catch (e) {
el('org-f-err').textContent = e.message || 'Errore nel salvataggio.';
} finally {
btn.disabled = false;
}
}
async function orgDeleteRole(id) {
const role = ORG.roles.find(r => r.id === id);
if (!confirm('Eliminare il ruolo "' + (role ? role.role_name : '') + '"?')) return;
try {
await api.orgRoleDelete(id);
showNotification('Ruolo eliminato.', 'success');
await orgLoadAll();
} catch (e) {
// 409 = ha ruoli subordinati
showNotification(e.message || 'Errore nell\'eliminazione.', 'error');
}
}
/** Crea una struttura organizzativa di base (solo se l'organigramma è vuoto). */
async function orgScaffold() {
if (ORG.roles.length) { showNotification('L\'organigramma non è vuoto.', 'info'); return; }
if (!confirm('Creare una struttura di base (Organi di amministrazione, Direzione, CISO, Responsabile IT, DPO)?')) return;
try {
const board = await api.orgRoleCreate({
role_name: 'Organi di amministrazione e direttivi',
is_governance_body: 1,
description: 'Approva le misure di gestione del rischio e ne vigila l\'attuazione (art. 23 D.Lgs. 138/2024).'
});
const dir = await api.orgRoleCreate({ role_name: 'Direzione / Alta Dirigenza', parent_role_id: board.id });
await api.orgRoleCreate({ role_name: 'Responsabile Sicurezza Informatica (CISO)', parent_role_id: dir.id, description: 'Coordina le misure di sicurezza e l\'attuazione del programma NIS2.' });
await api.orgRoleCreate({ role_name: 'Responsabile IT', parent_role_id: dir.id });
await api.orgRoleCreate({ role_name: 'Responsabile Protezione Dati (DPO)', parent_role_id: dir.id });
showNotification('Struttura di base creata. Personalizzala pure.', 'success');
await orgLoadAll();
} catch (e) {
showNotification('Errore nella creazione della struttura: ' + (e.message || e), 'error');
}
}
public/kb.html
+5 -5
View File
@@ -151,8 +151,8 @@
</div>
<!-- Stessa logica JS della pagina live (parita' funzionale assoluta, zero backend). -->
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260617"></script>
<script src="/js/api.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI. -->
<script src="/vendor/bootstrap-italia/dist/js/bootstrap-italia.bundle.min.js"></script>
@@ -161,9 +161,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script src="/js/kb.js"></script>
<script>
// Gate auth + chrome come le altre pagine -bi.
public/licenseExt.html
+1 -1
View File
@@ -515,7 +515,7 @@ body { background: var(--bg-main); }
<div id="toast"></div>
<script src="js/api.js?v=20260613"></script>
<script src="js/api.js?v=20260617"></script>
<script>
// ══════════════════════════════════════════════════════
// CONFIG
public/login.html
+2 -2
View File
@@ -94,8 +94,8 @@
</script>
<!-- Stessa logica della login attuale: ZERO modifiche backend -->
<script src="js/api.js?v=20260613"></script>
<script src="js/common.js?v=20260615"></script>
<script src="js/api.js?v=20260617"></script>
<script src="js/common.js?v=20260617"></script>
<script>
if (api.isAuthenticated()) { window.location.href = 'dashboard.html'; }
public/mktg-api-doc.html
+1 -1
View File
@@ -424,6 +424,6 @@ curl https://nis2.agile.software/api/services/status</pre>
</div>
</div>
<script src="js/common.js?v=20260615"></script>
<script src="js/common.js?v=20260617"></script>
</body>
</html>
public/normative.html
+5 -5
View File
@@ -112,8 +112,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -123,9 +123,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
if (!checkAuth()) throw new Error('Not authenticated');
loadSidebar();
public/onboarding.html
+2 -2
View File
@@ -494,8 +494,8 @@
</script>
<!-- Stessa logica della onboarding.html: ZERO modifiche backend -->
<script src="js/api.js?v=20260613"></script>
<script src="js/common.js?v=20260615"></script>
<script src="js/api.js?v=20260617"></script>
<script src="js/common.js?v=20260617"></script>
<script>
// ── Auth check ──────────────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/organigramma.html
+149
View File
@@ -0,0 +1,149 @@
<!DOCTYPE html>
<html lang="it">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
<title>Organigramma - NIS2 Agile</title>
<!-- Bootstrap Italia v2.18.1 self-hostato (regola: MAI CDN). Caricato PRIMA di style.css. -->
<link rel="stylesheet" href="/vendor/bootstrap-italia/dist/css/bootstrap-italia.min.css">
<link rel="stylesheet" href="/css/style.css?v=20260617">
<style>
.org-intro { background:#eff6ff; border-left:4px solid var(--primary,#2563eb); padding:14px 18px; border-radius:8px; margin-bottom:18px; font-size:.92rem; line-height:1.6; }
.org-gov-note { font-size:.82rem; color:#92400e; background:#fffbeb; border:1px solid #fde68a; border-radius:8px; padding:10px 12px; margin:12px 0 18px; }
.org-stats { display:flex; flex-wrap:wrap; gap:10px; margin-bottom:18px; }
.org-stat { flex:1 1 150px; min-width:130px; background:#fff; border:1px solid var(--gray-200,#e5e7eb); border-radius:10px; padding:12px 14px; }
.org-stat .n { font-size:1.5rem; font-weight:800; color:var(--primary,#2563eb); line-height:1; }
.org-stat .l { font-size:.78rem; color:var(--gray-500,#6b7280); margin-top:4px; }
/* Albero */
.org-tree { margin-top:6px; }
.org-children { margin-left:26px; border-left:2px solid var(--gray-100,#eef0f3); padding-left:16px; }
.org-node { margin:8px 0; }
.org-card { display:flex; align-items:flex-start; gap:12px; background:#fff; border:1px solid var(--gray-200,#e5e7eb); border-radius:10px; padding:12px 14px; }
.org-card.gov { border-color:#b45309; background:#fffdf7; }
.org-card-main { flex:1 1 auto; min-width:0; }
.org-role-name { font-weight:700; font-size:.98rem; }
.org-holder { font-size:.85rem; color:var(--gray-600,#4b5563); margin-top:2px; }
.org-holder.vacant { color:#9ca3af; font-style:italic; }
.org-desc { font-size:.82rem; color:var(--gray-500,#6b7280); margin-top:6px; line-height:1.5; }
.org-badge { display:inline-block; font-size:.68rem; font-weight:700; padding:2px 8px; border-radius:6px; margin-left:6px; vertical-align:middle; }
.org-badge.gov { background:#fef3c7; color:#92400e; }
.org-actions { display:flex; gap:6px; flex-wrap:wrap; flex-shrink:0; }
.org-actions .btn { padding:4px 8px; font-size:.74rem; }
.org-empty { text-align:center; padding:48px 16px; color:var(--gray-500,#6b7280); }
.org-empty .big { font-size:1.05rem; font-weight:700; color:var(--gray-700,#374151); margin-bottom:6px; }
/* Modale */
.om-overlay { display:none; position:fixed; inset:0; background:rgba(15,23,42,.5); z-index:1050; align-items:flex-start; justify-content:center; overflow:auto; padding:40px 16px; }
.om-overlay.open { display:flex; }
.om-dialog { background:#fff; border-radius:12px; width:100%; max-width:560px; box-shadow:0 20px 50px rgba(0,0,0,.25); }
.om-head { display:flex; justify-content:space-between; align-items:center; padding:16px 20px; border-bottom:1px solid var(--gray-100,#f3f4f6); }
.om-head h3 { margin:0; font-size:1.05rem; }
.om-body { padding:18px 20px; }
.om-foot { padding:14px 20px; border-top:1px solid var(--gray-100,#f3f4f6); display:flex; justify-content:flex-end; gap:10px; }
.om-field { margin-bottom:14px; }
.om-field label { display:block; font-weight:600; font-size:.86rem; margin-bottom:4px; }
.om-field input[type=text], .om-field select, .om-field textarea { width:100%; padding:9px 10px; border:1px solid var(--gray-200,#e5e7eb); border-radius:8px; font-size:.9rem; }
.om-field textarea { min-height:70px; resize:vertical; }
.om-check { display:flex; align-items:flex-start; gap:8px; background:#fffbeb; border:1px solid #fde68a; border-radius:8px; padding:10px 12px; font-size:.85rem; }
.om-check input { margin-top:3px; }
.om-err { color:#b91c1c; font-size:.82rem; min-height:18px; margin-top:2px; }
.om-close { background:none; border:none; font-size:1.4rem; line-height:1; cursor:pointer; color:var(--gray-400,#9ca3af); }
</style>
<!-- PWA:start -->
<link rel="manifest" href="/manifest.webmanifest">
<meta name="theme-color" content="#0066CC">
<link rel="icon" type="image/png" sizes="32x32" href="/assets/icons/favicon-32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/assets/icons/favicon-16.png">
<link rel="apple-touch-icon" sizes="180x180" href="/assets/icons/apple-touch-icon.png">
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="default">
<meta name="apple-mobile-web-app-title" content="NIS2 Agile">
<meta name="application-name" content="NIS2 Agile">
<script src="/js/pwa.js?v=20260614" defer></script>
<!-- PWA:end -->
</head>
<body>
<div class="app-layout">
<aside class="sidebar" id="sidebar"></aside>
<main class="main-content">
<header class="content-header">
<h2 data-i18n="org.title">Organigramma</h2>
<div class="content-header-actions">
<button class="btn btn-primary btn-sm" id="org-btn-new" onclick="orgOpenModal()" data-i18n="org.new_role">Nuovo ruolo</button>
</div>
</header>
<div class="content-body">
<div class="org-intro">
<strong>Chi è responsabile di cosa.</strong>
L'organigramma mappa i ruoli dell'organizzazione, la loro gerarchia e il titolare di ciascuno. È la base del modello relazionale NIS2: nelle fasi successive i ruoli si collegheranno a competenze, procedure, inventario e rischi.
</div>
<div class="org-gov-note">
<strong>Organi di amministrazione e direttivi (art. 23 D.Lgs. 138/2024)</strong>: marca con l'apposita spunta il ruolo che rappresenta gli organi di gestione. Su di essi ricade la responsabilità di approvare le misure di gestione del rischio e di vigilare sulla loro attuazione. Strumento di supporto organizzativo, non un parere legale.
</div>
<div class="org-stats" id="org-stats" style="display:none;">
<div class="org-stat"><div class="n" id="org-stat-total">0</div><div class="l">Ruoli definiti</div></div>
<div class="org-stat"><div class="n" id="org-stat-gov">0</div><div class="l">Organi di governance</div></div>
<div class="org-stat"><div class="n" id="org-stat-vacant">0</div><div class="l">Ruoli vacanti</div></div>
</div>
<div id="org-tree" class="org-tree" aria-live="polite"></div>
<div id="org-empty" class="org-empty" style="display:none;">
<div class="big">Nessun ruolo definito</div>
<div style="margin-bottom:16px;">Inizia a costruire l'organigramma della tua organizzazione.</div>
<button class="btn btn-primary" onclick="orgOpenModal()">Crea il primo ruolo</button>
<button class="btn btn-outline" onclick="orgScaffold()" style="margin-left:8px;">Crea struttura di base</button>
</div>
</div>
</main>
</div>
<!-- Modale crea/modifica ruolo -->
<div class="om-overlay" id="org-modal" role="dialog" aria-modal="true" aria-labelledby="org-modal-title">
<div class="om-dialog">
<div class="om-head">
<h3 id="org-modal-title">Nuovo ruolo</h3>
<button class="om-close" type="button" onclick="orgCloseModal()" aria-label="Chiudi">&times;</button>
</div>
<div class="om-body">
<input type="hidden" id="org-f-id">
<div class="om-field">
<label for="org-f-name">Nome del ruolo *</label>
<input type="text" id="org-f-name" maxlength="150" placeholder="es. Responsabile Sicurezza Informatica (CISO)">
</div>
<div class="om-field">
<label for="org-f-parent">Riporta a (ruolo padre)</label>
<select id="org-f-parent"><option value="">— Nessuno (nodo radice) —</option></select>
</div>
<div class="om-field">
<label for="org-f-holder">Titolare</label>
<select id="org-f-holder"><option value="">— Vacante —</option></select>
</div>
<div class="om-field">
<label for="org-f-desc">Responsabilità e poteri</label>
<textarea id="org-f-desc" maxlength="4000" placeholder="Descrivi cosa fa il ruolo, le sue responsabilità e i poteri di decisione/approvazione."></textarea>
</div>
<label class="om-check">
<input type="checkbox" id="org-f-gov">
<span>È un <strong>organo di amministrazione/direttivo</strong> (art. 23 D.Lgs. 138/2024): approva le misure di gestione del rischio e ne vigila l'attuazione.</span>
</label>
<div class="om-err" id="org-f-err" role="alert"></div>
</div>
<div class="om-foot">
<button class="btn btn-outline" type="button" onclick="orgCloseModal()">Annulla</button>
<button class="btn btn-primary" type="button" id="org-f-save" onclick="orgSaveRole()">Salva</button>
</div>
</div>
</div>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<script src="/vendor/bootstrap-italia/dist/js/bootstrap-italia.bundle.min.js"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script src="/js/organigramma.js?v=20260617"></script>
</body>
</html>
public/policies.html
+5 -5
View File
@@ -333,8 +333,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -344,9 +344,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// ── Auth & Init ─────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/register.html
+2 -2
View File
@@ -268,8 +268,8 @@
</script>
<!-- Stessa logica della register.html: ZERO modifiche backend -->
<script src="js/api.js?v=20260613"></script>
<script src="js/common.js?v=20260615"></script>
<script src="js/api.js?v=20260617"></script>
<script src="js/common.js?v=20260617"></script>
<script>
if (api.isAuthenticated()) { window.location.href = 'dashboard.html'; }
public/reports.html
+5 -5
View File
@@ -443,8 +443,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -454,9 +454,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// ── Auth & Init ─────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/risks.html
+5 -5
View File
@@ -494,8 +494,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -505,9 +505,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// ── Auth & Init ──────────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/settings.html
+5 -5
View File
@@ -672,8 +672,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -683,9 +683,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// ── Auth check ───────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/setup-org.html
+2 -2
View File
@@ -165,8 +165,8 @@
</main>
</div>
<script src="js/api.js?v=20260613"></script>
<script src="js/common.js?v=20260615"></script>
<script src="js/api.js?v=20260617"></script>
<script src="js/common.js?v=20260617"></script>
<script>
// ── Auth check ───────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/supply-chain.html
+5 -5
View File
@@ -477,8 +477,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -488,9 +488,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// ── Auth & Init ─────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/training.html
+5 -5
View File
@@ -292,8 +292,8 @@
</main>
</div>
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -303,9 +303,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
// ── Auth & Init ─────────────────────────────────────────
if (!checkAuth()) throw new Error('Not authenticated');
public/version.json
+1 -1
View File
@@ -1 +1 @@
{"version":"1.15.2","build":"2026-06-15-v1.15.2","date":"2026-06-15","changelog":"Completamento allineamento normativo (segnalazioni Fattori): help contestuale (help.js) con citazioni degli obblighi al D.Lgs. 138/2024 art.23/24/25 (non piu Direttiva); terminologia UI Asset -> Inventario/beni nelle pagine Inventario e nella guida. Nessuna modifica a dati o schema DB."}
{"version":"1.16.0","build":"2026-06-15-v1.16.0","date":"2026-06-15","changelog":"A4 Fase 4.1 - Organigramma: nuovo modulo per mappare ruoli, gerarchia e titolari, con il nodo distinto degli organi di amministrazione/direttivi (art.23 D.Lgs.138/2024, GV.RR-02). Backend OrgRoleController (CRUD, multi-tenancy, anti-IDOR, prevenzione cicli), tabella org_roles (migration 041, additiva), pagina organigramma.html con vista ad albero ed editor, help contestuale e voce di menu. Base del modello relazionale A4 (RACI/skill/scadenziario nelle fasi successive)."}
public/whistleblowing.html
+5 -5
View File
@@ -207,8 +207,8 @@
<!-- Report Detail Modal handled by common.js showModal -->
<script src="/js/api.js?v=20260613"></script>
<script src="/js/common.js?v=20260615"></script>
<script src="/js/api.js?v=20260617"></script>
<script src="/js/common.js?v=20260617"></script>
<!-- Bootstrap Italia bundle (componenti) + override sidebar BI (common-bi.js).
common-bi.js va DOPO common.js: ridefinisce solo loadSidebar() con markup BI,
riusando tutti gli helper di common.js (zero backend). -->
@@ -218,9 +218,9 @@
bootstrap.loadFonts('/vendor/bootstrap-italia/dist/fonts');
}
</script>
<script src="/js/common-bi.js?v=20260615"></script>
<script src="/js/i18n.js?v=20260615"></script>
<script src="/js/help.js?v=20260616"></script>
<script src="/js/common-bi.js?v=20260617"></script>
<script src="/js/i18n.js?v=20260617"></script>
<script src="/js/help.js?v=20260617"></script>
<script>
if (!checkAuth()) throw new Error('Not authenticated');
loadSidebar();
public/workflow.html
+3 -3
View File
@@ -319,9 +319,9 @@
</main>
</div>
<script src="js/api.js?v=20260613"></script>
<script src="js/common.js?v=20260615"></script>
<script src="js/i18n.js?v=20260615"></script>
<script src="js/api.js?v=20260617"></script>
<script src="js/common.js?v=20260617"></script>
<script src="js/i18n.js?v=20260617"></script>
<script>
if (!checkAuth()) throw new Error('Not authenticated');
loadSidebar();