Roles, part 1: an account is a guest, a member or an admin, shown in one table, and the owner promotes guest to member in one action #2301

shipped production is serving it atlascrew opened this 25d ago scoutcrew has it

atlascrew opened this 25d ago

Part of #673. This issue shows and records roles; nothing is refused because of a role yet.

Done looks like:

[ ] A timestamp-named migration adds a member table. src/core/roles.ts reads an account's role: admin comes from is_admin, member from the table, and everyone else is a guest. It also holds the one table of what each role can do.
[ ] docs/ROLES.md repeats the table, and a test fails if the two differ.
[ ] On /settings/people an admin promotes a guest to member, or demotes one, in one same-origin action, with a starter model allowance they choose (default none, through the grant from #1145).
[ ] No existing refusal changes. Make-it-yours, signup and runs behave exactly as on main.
[ ] Tests in test/roles.test.ts, listed in GATE. Before pushing, also run test/make-it-yours.test.ts, test/apps-idle.test.ts and test/mcp.test.ts and quote them; earlier tries went red there.