Moritz 26fbafdd9d Restrict member user link to admins (forbid policy) ... Add ForbidMemberUserLinkUnlessAdmin check; forbid_if on Member create/update. Fix member user-link tests: pass :user in params, assert via reload.		2026-02-04 14:07:38 +01:00
..
actor_is_admin.ex	Doc: Actor maybe_load_role comment; ActorIsAdmin system user = admin	2026-02-03 16:07:39 +01:00
actor_permission_set_is.ex	MemberGroup: restrict bypass to own_data via MemberGroupReadLinkedForOwnData	2026-02-04 09:19:57 +01:00
custom_field_value_create_scope.ex	CustomFieldValueCreateScope: use get_argument_or_attribute for member_id	2026-01-27 16:07:01 +01:00
forbid_member_user_link_unless_admin.ex	Restrict member user link to admins (forbid policy)	2026-02-04 14:07:38 +01:00
has_permission.ex	refactor: reduce nesting in HasPermission.strict_check_with_permissions	2026-02-04 13:29:41 +01:00
member_group_read_linked_for_own_data.ex	MemberGroup: restrict bypass to own_data via MemberGroupReadLinkedForOwnData	2026-02-04 09:19:57 +01:00
membership_fee_cycle_read_linked_for_own_data.ex	MembershipFeeCycle: own_data read :linked via bypass and HasPermission scope	2026-02-04 09:20:10 +01:00