mitgliederverwaltung/lib/mv/authorization
Moritz f342350537
All checks were successful
continuous-integration/drone/push Build is passing
Harden member user-link check: argument presence, nil actor, policy scope
- Forbid on :user argument presence (not value) to block unlink via nil/empty
- Defensive nil actor handling; policy restricted to create/update only
- Test: Ash.load with actor; test non-admin cannot unlink via user: nil
- Docs: unlink behaviour and policy split
2026-02-04 13:46:49 +01:00
..
checks Harden member user-link check: argument presence, nil actor, policy scope 2026-02-04 13:46:49 +01:00
actor.ex Doc: Actor maybe_load_role comment; ActorIsAdmin system user = admin 2026-02-03 16:07:39 +01:00
authorization.ex docs: Update domain Public API documentation 2026-01-20 15:50:08 +01:00
permission_sets.ex Add Role resource policies (defense-in-depth) 2026-02-04 12:37:48 +01:00
role.ex Add Role resource policies (defense-in-depth) 2026-02-04 12:37:48 +01:00