2 Commits

Include renames

Author	SHA1	Message	Date
PaddyandClaude Opus 5.5	bfb8f2ff9c	Add a read-only role per app for calendar, feedback and tickets ... A grant can now be `read` instead of `access`: requireAppAccess lets it through for GET/HEAD/OPTIONS and answers 403 to every other method, so new write routes are covered without being marked. `read` and `access` on the same app are rejected together; user management has no read role. /tickets/admin/me and /feedback/admin/me report `readOnly`. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 23:24:28 +01:00
Paddy	bf7be65b03	Add admin identity module: better-auth, per-app permissions, invitations (#12) ... Reviewed-on: #12 Co-authored-by: Patrick Müller <mail@pmueller.me> Co-committed-by: Patrick Müller <mail@pmueller.me>	2026-09-06 10:41:54 +00:00