local-it/mitgliederverwaltung
2
3
Fork 0
Code Issues 67 Pull requests 6 Projects 3 Releases Packages 1 Activity Actions

Docs: note User-Member Linking enforcement in code
Some checks reported errors
continuous-integration/drone/push Build was killed
Details
continuous-integration/drone/promote/production Build is failing
Details

Browse source 
- update_user restricted via ActorIsAdmin; Form gates Member-Linking UI
This commit is contained in:
Moritz 2026-01-30 11:13:41 +01:00
parent cf6bd4a6a1
commit 6e13a3aa34
Signed by: moritz
GPG key ID: 1020A035E5DD0824
3 changed files with 3 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/mv/authorization/permission_sets.ex
View file

@ -120,7 +120,6 @@ defmodule Mv.Authorization.PermissionSets do
pages: [
# No "/" - Mitglied must not see member index at root (same content as /members).
# Own profile (sidebar links to /users/:id) and own user edit
"/profile",
"/users/:id",
"/users/:id/edit",
"/users/:id/show/edit",
@ -156,7 +155,6 @@ defmodule Mv.Authorization.PermissionSets do
pages: [
"/",
# Own profile (sidebar links to /users/:id; redirect target must be allowed)
"/profile",
"/users/:id",
"/users/:id/edit",
"/users/:id/show/edit",
@ -206,7 +204,6 @@ defmodule Mv.Authorization.PermissionSets do
pages: [
"/",
# Own profile (sidebar links to /users/:id; redirect target must be allowed)
"/profile",
"/users/:id",
"/users/:id/edit",
"/users/:id/show/edit",