Permission names are <resource>:<action>, replacing the catch-all admin permission

examples/plugins/admin/i18n/en-US.ts

@@ -92,8 +92,8 @@ const messages = {
   "admin.permissions.create": "Create permission",
   "admin.permissions.delete": "Delete permission",
   "admin.permissions.deleteMessage": "Delete permission {{name}}? This revokes it from everyone it's assigned to.",
-  "admin.permissions.error.adminUndeletable": "The admin permission can't be deleted — it would remove all admin access.",
-  "admin.permissions.error.selfRevoke": "You can't revoke your own admin access.",
+  "admin.permissions.error.lockoutUndeletable": "The permissions:write permission can't be deleted — nobody could grant a permission again.",
+  "admin.permissions.error.selfRevoke": "You can't revoke your own permissions:write grant.",
   "admin.permissions.effective": "Effective access",
   "admin.permissions.effectiveHint": "Everyone who holds this permission — directly or through a group (resolved by Keto).",
   "admin.permissions.field.name": "Permission name",
@@ -108,7 +108,7 @@ const messages = {
   "admin.permissions.searchPlaceholder": "Search permission name…",
   "admin.permissions.title": "Permissions",
   "admin.permissions.validation.member": "Pick a user or group to assign the permission to.",
-  "admin.permissions.validation.name": "Permission names use lowercase letters, digits, dashes and underscores.",
+  "admin.permissions.validation.name": "Permission names are <resource>:<action>, like scheduling:read — lowercase letters, digits, dashes and underscores on each side of the colon.",
 
   "admin.unavailable.message": "{{what}} is not configured on this deployment.",
   "admin.unavailable.title": "Admin unavailable",