refactor(auth): remove ROLE_PERMISSIONS fallback, fail closed instead - #15

Merged

zumbrunn merged 10 commits into

mainfrom

refactor/drop-role-permissions-fallback

Aug 31, 2026

Commits on Aug 29, 2026

refactor(auth): remove ROLE_PERMISSIONS fallback, fail closed instead

zumbrunn
and
claude
committed
d021ccf

Commits on Aug 30, 2026

fix(auth): site-user inline-edit fails closed when authz is undefined
zumbrunn
committed
8828561
docs(auth): fence roleHasPermission() and ResponseTransformContext.auth.hasPermission() against misuse
zumbrunn
committed
687f464
fix(auth): ResponseTransformContext auth.role/hasPermission use highest admin-tier role
zumbrunn
committed
bdeb897
chore(cli): align validate.ts permission vocabulary with the authz schema
zumbrunn
committed
b696e2b
fix(auth): export ADMIN_ROLE_RANK, de-dupe plugin-admin's rank table

zumbrunn
and
claude
committed
5f453c8
docs(auth): drop admin.access from the plugin-authoring permission table

zumbrunn
and
cursoragent
committed
674ea19
docs(auth): ROLE_PERMISSIONS is no longer an authority

zumbrunn
and
cursoragent
committed
91d1efb
chore(deps): pin @dune/plugin-admin to ^3.0

zumbrunn
and
cursoragent
committed
aa92872
fix: correct docs/content submodule pointer from a local-only orphan commit

zumbrunn
and
claude
committed
3f4a3a6