Anas Rashid d72c14f8bd Permissions (IAM): L2/L1 moderators and scoped grants (#29) ... - Roles: reader, mod-l2, mod-l1, admin. Grants: scope (all, poet, book/section with everything in it, one work) x content (poets, books, works, dictionary) x actions (create, edit, delete, arrange); dictionary grants are site-wide. can() in api/src/permissions.ts is the one check. - Admin API and pages: role dropdown on /admin; /admin/user/:id lists a moderator's grants, adds them (target by poet id or page link) and revokes them; demoting a moderator clears their grants; grant and revoke go to the audit log. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		2026-10-08 23:13:06 +02:00
..
featured.sql	Pinned poets on the home page (مقبول شعرا): Iqbal, Ghalib, Mir Taqi Mir, Mir Dard, Dagh	2026-10-08 20:42:33 +02:00
schema.sql	Permissions (IAM): L2/L1 moderators and scoped grants (#29)	2026-10-08 23:13:06 +02:00