PaddyandClaude Opus 5.5 bfb8f2ff9c Add a read-only role per app for calendar, feedback and tickets ...

A grant can now be `read` instead of `access`: requireAppAccess lets it
through for GET/HEAD/OPTIONS and answers 403 to every other method, so
new write routes are covered without being marked. `read` and `access`
on the same app are rejected together; user management has no read role.
/tickets/admin/me and /feedback/admin/me report `readOnly`.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-29 23:24:28 +01:00

docker/init

Add a per-event "tickets mailed" flag and mention Abendkasse pickup in the confirmation email

2026-09-15 19:46:56 +02:00

docs

Add a read-only role per app for calendar, feedback and tickets

2026-10-29 23:24:28 +01:00

public

Initial commit

2022-12-24 14:32:13 +01:00

sql

Add a per-event "tickets mailed" flag and mention Abendkasse pickup in the confirmation email

2026-09-15 19:46:56 +02:00

src

Add a read-only role per app for calendar, feedback and tickets

2026-10-29 23:24:28 +01:00

test

Add a read-only role per app for calendar, feedback and tickets

2026-10-29 23:24:28 +01:00

.env.example

Add admin identity module: better-auth, per-app permissions, invitations (#12)

2026-09-06 10:41:54 +00:00

.gitignore

Initial commit

2022-12-24 14:32:13 +01:00

.nvmrc

Migrate the API to native ESM and vitest; pin Node 26

2026-09-05 16:02:26 +02:00

app.ts

Add admin identity module: better-auth, per-app permissions, invitations (#12)

2026-09-06 10:41:54 +00:00

CLAUDE.md

Add a read-only role per app for calendar, feedback and tickets

2026-10-29 23:24:28 +01:00

DEFERRED_SECURITY.md

Drop the calendar's legacy authentication path

2026-09-06 23:32:59 +02:00

docker-compose.dev.yml

Add Tickets domain for the voucher-based ticket shop (#8)

2026-08-24 21:18:00 +00:00

docker-compose.test.yml

Add admin identity module: better-auth, per-app permissions, invitations (#12)

2026-09-06 10:41:54 +00:00

package-lock.json

Add admin identity module: better-auth, per-app permissions, invitations (#12)

2026-09-06 10:41:54 +00:00

package.json

Add admin identity module: better-auth, per-app permissions, invitations (#12)

2026-09-06 10:41:54 +00:00

sonar-project.properties

Initial commit

2022-12-24 14:32:13 +01:00

tsconfig.json

Migrate the API to native ESM and vitest; pin Node 26

2026-09-05 16:02:26 +02:00

vitest.config.ts

Add admin identity module: better-auth, per-app permissions, invitations (#12)

2026-09-06 10:41:54 +00:00

vitest.integration.config.ts

Add admin identity module: better-auth, per-app permissions, invitations (#12)

2026-09-06 10:41:54 +00:00

S

Description

No description provided

581 KiB

0 Stars 2 Watchers 0 Forks

Languages

TypeScript 100%