Rename the coarse gate from role to permission, matching RBAC

2026-08-03 17:02:47 +02:00
parent 41c568796c
commit 925debbd51
79 changed files with 744 additions and 738 deletions
@@ -130,9 +130,9 @@ services:
    environment:
      ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@plainpages.local}
      ADMIN_PASSWORD: ${ADMIN_PASSWORD:-admin}
-      # Base roles for the demo admin; bootstrap also grants every discovered plugin's declared
-      # role names (so the reference plugin — and any drop-in — works out of the box).
-      ADMIN_ROLES: ${ADMIN_ROLES:-admin}
+      # Base permissions for the demo admin; bootstrap also grants every discovered plugin's declared
+      # permission names (so the reference plugin — and any drop-in — works out of the box).
+      ADMIN_PERMISSIONS: ${ADMIN_PERMISSIONS:-admin}
      APP_URL: ${APP_URL:-http://localhost:3000}   # printed in the first-run login banner
      JWKS_FILE: /etc/config/kratos/tokenizer/jwks.json
      KETO_WRITE_URL: http://keto:4467