6 Commits

Author	SHA1	Message	Date
lilleman	0011182f16	Permissions are a fixed list from plugin code; grant them on Users and Groups	2026-08-05 14:29:15 +02:00
lilleman	b6f4e5366a	Enforce the permission-name rule at discovery, for every plugin	2026-08-05 13:00:23 +02:00
lilleman	065d865d24	Permission names are <resource>:<action>, replacing the catch-all admin permission	2026-08-05 12:45:06 +02:00
lilleman	096720904e	Rename the coarse gate from role to permission, matching RBAC	2026-08-03 17:41:40 +02:00
lilleman	b580f7d06e	Rename the plugin-API permission gate to role	2026-08-03 17:41:40 +02:00
lilleman	e8ea911b80	Move admin screens (users/groups/roles/oauth2-clients) into a drop-in example plugin; add the ctx.system capability surface	2026-07-02 08:01:15 +02:00