 lilleman
|
1787754781
|
Extend the read-only treatment to OAuth2 clients and write-intent GETs
|
2026-08-05 15:38:56 +02:00 |
|
|
lilleman
|
765f349007
|
Model the read/write split in the UI: read-only views, self-revoke and inherited-grant guards
|
2026-08-05 15:38:37 +02:00 |
|
|
lilleman
|
29d654c012
|
Permissions are a fixed list from plugin code; grant them on Users and Groups
|
2026-08-05 15:38:21 +02:00 |
|
|
lilleman
|
fb4382be9d
|
Enforce the permission-name rule at discovery, for every plugin
|
2026-08-05 15:38:00 +02:00 |
|
|
lilleman
|
27fee5f8a3
|
Permission names are <resource>:<action>, replacing the catch-all admin permission
|
2026-08-05 15:37:39 +02:00 |
|
|
lilleman
|
096720904e
|
Rename the coarse gate from role to permission, matching RBAC
|
2026-08-03 17:41:40 +02:00 |
|
|
lilleman
|
b580f7d06e
|
Rename the plugin-API permission gate to role
|
2026-08-03 17:41:40 +02:00 |
|
|
lilleman
|
e8ea911b80
|
Move admin screens (users/groups/roles/oauth2-clients) into a drop-in example plugin; add the ctx.system capability surface
|
2026-07-02 08:01:15 +02:00 |
|