Permissions (IAM): moderator levels and scoped grants #29
Labels
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: anas/divan#29
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Split from the admin panel (#27). Moderator levels L2 (junior) and L1 (senior); admins grant scope (all poets / chosen poets / chosen books or works) × content type (poets, books, works, dictionary) × action (create, edit, delete, arrange); grants changed or revoked anytime; one permission check used by every moderation endpoint and page; admin pages to manage moderators and grants; audit log entries. Acceptance: a moderator cannot see or change anything outside their grants (tests).