Moritz 26fbafdd9d Restrict member user link to admins (forbid policy) ... Add ForbidMemberUserLinkUnlessAdmin check; forbid_if on Member create/update. Fix member user-link tests: pass :user in params, assert via reload.		2026-02-04 14:07:38 +01:00
..
accounts	User: fix last-admin validation and forbid non-admin role_id change	2026-02-04 09:19:47 +01:00
authorization	Add Role resource policies (defense-in-depth)	2026-02-04 14:07:38 +01:00
helpers	Add Role resource policies (defense-in-depth)	2026-02-04 14:07:38 +01:00
membership	Restrict member user link to admins (forbid policy)	2026-02-04 14:07:38 +01:00
membership_fees	MembershipFeeCycle: own_data read :linked via bypass and HasPermission scope	2026-02-04 09:20:10 +01:00