Permissions (IAM): moderator levels and scoped grants #29

Closed
opened 2026-10-08 20:49:32 +00:00 by anas · 0 comments
Owner

Split from the admin panel (#27). Moderator levels L2 (junior) and L1 (senior); admins grant scope (all poets / chosen poets / chosen books or works) × content type (poets, books, works, dictionary) × action (create, edit, delete, arrange); grants changed or revoked anytime; one permission check used by every moderation endpoint and page; admin pages to manage moderators and grants; audit log entries. Acceptance: a moderator cannot see or change anything outside their grants (tests).

Split from the admin panel (#27). Moderator levels L2 (junior) and L1 (senior); admins grant scope (all poets / chosen poets / chosen books or works) × content type (poets, books, works, dictionary) × action (create, edit, delete, arrange); grants changed or revoked anytime; one permission check used by every moderation endpoint and page; admin pages to manage moderators and grants; audit log entries. Acceptance: a moderator cannot see or change anything outside their grants (tests).
anas added this to the Phase 3: Accounts, admin panel and personal library milestone 2026-10-08 20:49:32 +00:00
anas closed this issue 2026-10-08 21:22:27 +00:00
Sign in to join this conversation.
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: anas/divan#29
No description provided.