zhi 271d5140e6 feat(users): switch account management to single-role model ...

- add users.role_id for one global role per account
- seed protected account-manager role with account.create permission
- default new accounts to guest role
- block admin role assignment through user management
- allow account-manager permission to create accounts

2026-03-21 08:44:19 +00:00

7.4 KiB

Raw Blame History

View Raw