14 Commits

Author	SHA1	Message	Date
lilleman	ad812e17c2	Refuse a group change that would lock the acting admin out, and title a read-only user page View user	2026-10-31 10:47:47 +01:00
lilleman	85bfadd040	Answer stability round 1: 1 🔴, 4 🟡 (0 misread); allow the stale-save 409 in the e2e console guard, report a partial save when Keto cannot be read again, add the missing group, no-op and plain-login tests	2026-10-31 09:46:17 +01:00
lilleman	f4969d5c1f	Refuse a stale permission save, confirm or report it, show View to read-only holders, keep an absolute return_to beside a locale	2026-10-31 09:34:05 +01:00
lilleman	af974cfa36	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00
lilleman	edcd9fefc8	Deleting a group revokes the permissions it granted	2026-08-05 15:39:08 +02:00
lilleman	1787754781	Extend the read-only treatment to OAuth2 clients and write-intent GETs	2026-08-05 15:38:56 +02:00
lilleman	765f349007	Model the read/write split in the UI: read-only views, self-revoke and inherited-grant guards	2026-08-05 15:38:37 +02:00
lilleman	29d654c012	Permissions are a fixed list from plugin code; grant them on Users and Groups	2026-08-05 15:38:21 +02:00
lilleman	27fee5f8a3	Permission names are <resource>:<action>, replacing the catch-all admin permission	2026-08-05 15:37:39 +02:00
lilleman	6440c543e5	Architecture review fixes: partials carry the locale, mountable locales/, shared core words	2026-08-03 23:12:18 +02:00
lilleman	245d1ad5b5	Add i18n support: per-locale catalogs, URL-driven locale, translated core and examples	2026-08-03 22:37:27 +02:00
lilleman	f38b5373bd	Say user throughout, noting Ory's identity naming in the docs	2026-08-03 17:41:40 +02:00
lilleman	3486e0ad00	Rename the Keto User namespace to Identity, matching Kratos	2026-08-03 17:41:40 +02:00
lilleman	e8ea911b80	Move admin screens (users/groups/roles/oauth2-clients) into a drop-in example plugin; add the ctx.system capability surface	2026-07-02 08:01:15 +02:00