mitgliederverwaltung/test/mv
Moritz e47547e065 Add Role resource policies (defense-in-depth)
- PermissionSets: Role read :all for own_data, read_only, normal_user; admin keeps full CRUD
- Role resource: authorizers and policies with HasPermission
- Tests: role_policies_test.exs (read all, create/update/destroy admin only)
- Fix existing tests to pass actor or authorize?: false for Role operations
2026-02-04 12:37:48 +01:00
..
accounts User: fix last-admin validation and forbid non-admin role_id change 2026-02-04 09:19:47 +01:00
authorization Add Role resource policies (defense-in-depth) 2026-02-04 12:37:48 +01:00
helpers Add Role resource policies (defense-in-depth) 2026-02-04 12:37:48 +01:00
membership Docs: groups and roles/permissions architecture, Group moduledoc 2026-02-04 09:20:26 +01:00
membership_fees MembershipFeeCycle: own_data read :linked via bypass and HasPermission scope 2026-02-04 09:20:10 +01:00