core/server/auth/permissions.go at 316c9cbfa714964c5a0fe784b3b4dec99c533f4e

Archived

This repository has been archived on 2026-04-03. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

Jeffrey Smith 316c9cbfa7

CI/CD / detect-changes (pull_request) Successful in 19s

Details

CI/CD / test-frontend (pull_request) Has been skipped

Details

CI/CD / test-go-pg (pull_request) Successful in 2m14s

Details

CI/CD / test-sqlite (pull_request) Successful in 2m56s

Details

CI/CD / build-and-deploy (pull_request) Successful in 1m21s

Details

admin → RBAC group migration: grant-based access replaces role check

surface.admin.access permission + seeded Admins system group replaces
hardcoded role == "admin" middleware checks. Admin bypass removed from
RequirePermission — all permissions flow through group membership.
Bootstrap, seed, OIDC, and admin handlers sync group membership on
role changes. Demotion/deletion safeguards use group member count.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-26 16:14:46 +00:00

5.6 KiB

Raw Blame History

View Raw

5.6 KiB Raw Blame History

5.6 KiB

Raw Blame History