sjg/trx-rs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add restricted guest role
CI / lint (pull_request) Successful in 2m26s
Details
CI / test (pull_request) Successful in 9m22s
Details
CI / frontend (pull_request) Successful in 5m15s
Details
CI / reuse (pull_request) Successful in 5s
Details

Browse Source
This commit is contained in:
sjg
2026-08-11 15:24:51 +02:00
parent 5e9dae02c7
commit 721ff04908
17 changed files with 240 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/Architecture.md
+2 -1
View File
@@ -926,7 +926,8 @@ main
### HTTP Frontend Auth
- Optional Argon2id-backed managed accounts with HttpOnly session cookies
- Composable Read, Control, Write, and Administrator roles, with policy shared by middleware and handlers
- An exclusive Guest role plus composable Read, Control, Write, and Administrator roles, with policy shared by middleware and handlers
- Guest sessions receive read-only station access but no account-control endpoints or panels
- Atomic JSON persistence with migration from the legacy single-role schema
- Account enable/disable, administrator CRUD, self-service password changes, and session revocation on security changes
- A database invariant always preserves at least one enabled administrator