The legacy JSPWiki security model used a flat XML file (wikantik.policy) to define role-based permissions. This was replaced with a PostgreSQL policy_grants table, enabling runtime permission management through the admin UI without server restarts.
The postgresql-permissions.ddl script creates the policy_grants and groups/group_members tables. Policy is always database-backed when wikantik.datasource is configured (the default); there is no file-based fallback.
policy_grants — Maps roles to permissions (view, edit, upload, etc.)groups — Wiki groups (Admin, Authenticated, etc.)group_members — Group membership assignmentsThis change was a prerequisite for both the Admin Security UI and the Knowledge Graph, which needed database-backed group membership for its knowledge-admin role plan.