feat(members): per-member permission overrides - #262

Merged

kipavy merged 21 commits into

devfrom

feat/per-member-permission-overrides-client

Sep 12, 2026

Commits on Sep 11, 2026

feat(perms): apply per-member allow/deny masks when resolving permissions
kipavy
committed
b0423fb
fix(perms): strengthen deny-precedence test, fix team-fallback masks, remove stale comment
kipavy
committed
ca37258
fix(vault): apply permission overrides to the keychain role mirror
kipavy
committed
8fc692e
refactor(vault): reuse effectivePermissions for the keychain role mirror
kipavy
committed
77d6487
feat(members): add the set-member-permissions service call and store action
kipavy
committed
e364627
test(members): pin the set-member-permissions failure path
kipavy
committed
f884fce
refactor(members): share one reversible-action wrapper between both role toggles
kipavy
committed
7a812cc
feat(members): add a tri-state permission override row
kipavy
committed
f54662c
feat(members): edit per-member permissions from the member detail panel
kipavy
committed
088b9d0
test(members): pin the fail-closed hierarchy guardrail
kipavy
committed
094c8f8
fix(members): let an admin clear an override bit they do not hold
kipavy
committed
51ff0a1
feat(members): mark members carrying permission overrides in the roster
kipavy
committed
2ff6223
fix(members): keep the role-badge wrapper inline so the roster line does not break
kipavy
committed
e33a53d
feat(members): confirm before an override revokes vault key access
kipavy
committed
978f090
fix(members): keep rows inert while the revoke dialog is open
kipavy
committed
ed2bdb1
feat(logs): render the member permissions-changed audit event
kipavy
committed
65f3c22
fix(teams): keep override masks in the loadTeams change predicate
kipavy
committed
55256f5
fix(members): gate the permissions section, scope undo, keep the retired bit clearable
kipavy
committed
d135081
fix(i18n): match the failedTo* format, use 保险库 for vault in zh
kipavy
committed
25237b5

Navigation Menu

Uh oh!

feat(members): per-member permission overrides - #262

feat(members): per-member permission overrides#262
kipavy merged 21 commits into
devfrom
feat/per-member-permission-overrides-client

Commits on Sep 11, 2026

feat(perms): apply per-member allow/deny masks when resolving permissions

fix(perms): strengthen deny-precedence test, fix team-fallback masks, remove stale comment

fix(vault): apply permission overrides to the keychain role mirror

refactor(vault): reuse effectivePermissions for the keychain role mirror

feat(members): add the set-member-permissions service call and store action

test(members): pin the set-member-permissions failure path

refactor(members): share one reversible-action wrapper between both role toggles

feat(members): add a tri-state permission override row

feat(members): edit per-member permissions from the member detail panel

test(members): pin the fail-closed hierarchy guardrail

fix(members): let an admin clear an override bit they do not hold

feat(members): mark members carrying permission overrides in the roster

fix(members): keep the role-badge wrapper inline so the roster line does not break

feat(members): confirm before an override revokes vault key access

fix(members): keep rows inert while the revoke dialog is open

feat(logs): render the member permissions-changed audit event

fix(teams): keep override masks in the loadTeams change predicate

fix(members): gate the permissions section, scope undo, keep the retired bit clearable

fix(i18n): match the failedTo* format, use 保险库 for vault in zh

Commits on Sep 12, 2026

fix(members): undo bails instead of writing empty masks for an absent member

refactor(members): extract the read-only reason chain into services/permissions.ts