allow Guest to combine with Read, Control, Transmit, and Write
keep Guest incompatible with Administrator
preserve the Guest restriction on password changes and account controls
update role-picker behavior and browser regression coverage
regenerate the committed frontend bundle
Why
The role picker treated Guest as mutually exclusive with every other role. Selecting an operational permission therefore removed Guest and unintentionally removed its password/account restriction. Guest is better modeled as an account-policy flag that can accompany ordinary radio permissions.
Impact
Guest users can receive additional operating permissions without gaining password or account controls. Selecting Guest only clears Administrator; selecting Administrator clears Guest.
Validation
npm run typecheck
npm run lint
npm test (64 passed)
npm run build
cargo fmt --all -- --check
cargo test -p trx-frontend-http auth::tests --lib (18 passed)
node tests/account-management.mjs with installed Chrome
## Summary
- allow Guest to combine with Read, Control, Transmit, and Write
- keep Guest incompatible with Administrator
- preserve the Guest restriction on password changes and account controls
- update role-picker behavior and browser regression coverage
- regenerate the committed frontend bundle
## Why
The role picker treated Guest as mutually exclusive with every other role. Selecting an operational permission therefore removed Guest and unintentionally removed its password/account restriction. Guest is better modeled as an account-policy flag that can accompany ordinary radio permissions.
## Impact
Guest users can receive additional operating permissions without gaining password or account controls. Selecting Guest only clears Administrator; selecting Administrator clears Guest.
## Validation
- `npm run typecheck`
- `npm run lint`
- `npm test` (64 passed)
- `npm run build`
- `cargo fmt --all -- --check`
- `cargo test -p trx-frontend-http auth::tests --lib` (18 passed)
- `node tests/account-management.mjs` with installed Chrome
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Why
The role picker treated Guest as mutually exclusive with every other role. Selecting an operational permission therefore removed Guest and unintentionally removed its password/account restriction. Guest is better modeled as an account-policy flag that can accompany ordinary radio permissions.
Impact
Guest users can receive additional operating permissions without gaining password or account controls. Selecting Guest only clears Administrator; selecting Administrator clears Guest.
Validation
npm run typechecknpm run lintnpm test(64 passed)npm run buildcargo fmt --all -- --checkcargo test -p trx-frontend-http auth::tests --lib(18 passed)node tests/account-management.mjswith installed Chrome