feat: RBAC support — four plugin permissions + admin route gates (LOC-4200)#127

Merged

david-vaclavek merged 8 commits into

mainfrom

feat/rbac-LOC-7

Jul 1, 2026

Commits on May 14, 2026

feat: RBAC support — register four plugin permissions + gate all admin routes (LOC-4200)

Agent System
and
claude
committed
fix: gate destructive plugin-settings PUT behind settings.update (LOC-4200)

Agent System
and
claude
committed
fix: send Download ui-languages with transfer request (LOC-4200)
Agent System
committed
fix: drop category from plugins-section RBAC actions so they register (LOC-4200)

Agent System
and
claude
committed

Commits on May 15, 2026

fix: surface all four RBAC permissions in the Plugins tab (LOC-4200)

Agent System
and
claude
committed
fix: address David's RBAC follow-ups on LOC-4200
Agent System
committed
fix: gate settings routes and webhook-author select by RBAC (LOC-4200)

david-vaclavek
and
claude
committed
chore: trim verbose RBAC code comments (LOC-4200)

david-vaclavek
and
claude
committed