lib/mv/authorization/permission_sets.ex

@@ -118,12 +118,16 @@ defmodule Mv.Authorization.PermissionSets do
         %{resource: "Group", action: :read, scope: :all, granted: true}
       ],
       pages: [
-        # Home page
-        "/",
-        # Own profile
+        # No "/" - Mitglied must not see member index at root (same content as /members).
+        # Own profile (sidebar links to /users/:id) and own user edit
         "/profile",
-        # Linked member detail (filtered by policy)
-        "/members/:id"
+        "/users/:id",
+        "/users/:id/edit",
+        "/users/:id/show/edit",
+        # Linked member detail and edit (data access filtered by policy scope: :linked)
+        "/members/:id",
+        "/members/:id/edit",
+        "/members/:id/show/edit"
       ]
     }
   end