Permission names are <resource>:<action>, replacing the catch-all admin permission

2026-08-05 12:45:06 +02:00
parent 9412b90946
commit 27fee5f8a3
23 changed files with 388 additions and 180 deletions
@@ -132,7 +132,7 @@ services:
      ADMIN_PASSWORD: ${ADMIN_PASSWORD:-admin}
      # Base permissions for the demo admin; bootstrap also grants every discovered plugin's declared
      # permission names (so the reference plugin — and any drop-in — works out of the box).
-      ADMIN_PERMISSIONS: ${ADMIN_PERMISSIONS:-admin}
+      ADMIN_PERMISSIONS: ${ADMIN_PERMISSIONS:-}
      APP_URL: ${APP_URL:-http://localhost:3000}   # printed in the first-run login banner
      JWKS_FILE: /etc/config/kratos/tokenizer/jwks.json
      KETO_WRITE_URL: http://keto:4467