Moritz 14fa873640 Restrict User.update_user to admin; allow :update for email only ... - Add ActorIsAdmin policy check (admin permission set only) - User: policy action(:update_user) forbid_unless + authorize_if ActorIsAdmin - User: primary :update action accept [:email] for non-admin profile edit		2026-01-30 11:13:23 +01:00
..
user	Fix OIDC login by using SystemActor in OidcEmailCollision validation	2026-01-23 02:12:53 +01:00
accounts.ex	docs: Update domain Public API documentation	2026-01-20 15:50:08 +01:00
token.ex	docs: Update domain Public API documentation	2026-01-20 15:50:08 +01:00
user.ex	Restrict User.update_user to admin; allow :update for email only	2026-01-30 11:13:23 +01:00
user_identity.exs	doc: added comments and updated to latest ashautentication version and required changes	2025-07-02 17:03:37 +02:00