PaddyandClaude Opus 5.5 bfb8f2ff9c Add a read-only role per app for calendar, feedback and tickets ...

A grant can now be `read` instead of `access`: requireAppAccess lets it
through for GET/HEAD/OPTIONS and answers 403 to every other method, so
new write routes are covered without being marked. `read` and `access`
on the same app are rejected together; user management has no read role.
/tickets/admin/me and /feedback/admin/me report `readOnly`.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-29 23:24:28 +01:00

..

admin

Add a read-only role per app for calendar, feedback and tickets

2026-10-29 23:24:28 +01:00

calendar

Drop the calendar's legacy authentication path

2026-09-06 23:32:59 +02:00

common

Migrate the API to native ESM and vitest; pin Node 26

2026-09-05 16:02:26 +02:00

feedback

Drop the calendar's legacy authentication path

2026-09-06 23:32:59 +02:00

integration

Add a read-only role per app for calendar, feedback and tickets

2026-10-29 23:24:28 +01:00

tickets

Add a per-event "tickets mailed" flag and mention Abendkasse pickup in the confirmation email

2026-09-15 19:46:56 +02:00

template.test.ts

Migrate the API to native ESM and vitest; pin Node 26

2026-09-05 16:02:26 +02:00