Guard the group paths against self-lockout, and title a read-only user page View user #195

Merged

lilleman merged 6 commits from item-3 into main 2026-10-31 11:07:30 +01:00

Conversation 0 Commits 6 Files Changed 10

+167 -34

6 Commits

Author	SHA1	Message	Date
lilleman	b478cc7735	Answer prose round 1: 0 🔴, 3 🟡 (0 misread); the pageError comment is true, nested-group removal is unambiguous, the trade-off lives only at the guard	2026-10-31 11:02:47 +01:00
lilleman	8906340cf8	Answer product-owner round 1: 0 🔴, 1 🟡 (0 misread); the refusal names the permissions you would lose	2026-10-31 11:02:47 +01:00
lilleman	35f71d435b	Answer stability round 1: 0 🔴, 2 🟡 (0 misread); tests pin all three user-page modes and the refusal page's group, the guard checks membership before the per-permission walk, logs the action and what was lost	2026-10-31 11:02:47 +01:00
lilleman	c36f393fff	Answer security round 1: 0 🔴, 0 🟡 (0 misread); clean	2026-10-31 10:48:49 +01:00
lilleman	ad812e17c2	Refuse a group change that would lock the acting admin out, and title a read-only user page View user	2026-10-31 10:47:47 +01:00
lilleman	fcc5e04e0d	Record the reading cost of the chunk before item 3	2026-10-31 10:47:47 +01:00