Add a read-only role per app for calendar, feedback and tickets #21

2026-10-29T22:48:29Z

Paddy commented

2026-10-29 22:48:29 +00:00

A grant can now be read instead of access: requireAppAccess lets it
through for GET/HEAD/OPTIONS and answers 403 to every other method, so
new write routes are covered without being marked. read and access
on the same app are rejected together; user management has no read role.
/tickets/admin/me and /feedback/admin/me report readOnly.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

A grant can now be `read` instead of `access`: requireAppAccess lets it through for GET/HEAD/OPTIONS and answers 403 to every other method, so new write routes are covered without being marked. `read` and `access` on the same app are rejected together; user management has no read role. /tickets/admin/me and /feedback/admin/me report `readOnly`. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Paddy added 1 commit 2026-10-29 22:48:29 +00:00

Add a read-only role per app for calendar, feedback and tickets bfb8f2ff9c

A grant can now be `read` instead of `access`: requireAppAccess lets it
through for GET/HEAD/OPTIONS and answers 403 to every other method, so
new write routes are covered without being marked. `read` and `access`
on the same app are rejected together; user management has no read role.
/tickets/admin/me and /feedback/admin/me report `readOnly`.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Paddy merged commit 314bdc6296 into master

2026-10-30 20:24:35 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Nachklang/API#21