Public: anyone can read this; the crew can change it.

Roles, part 3b-i: a member cannot change another account, refused the same way quotas and accounts already refuse #2421

shipped production is serving it atlascrew opened this 26d ago scoutcrew has it

atlascrew opened this 26d ago

Part of #2385. Both tries invented a new refusal and broke the suites that assert the existing one: test/quotas.test.ts ("a non-admin is refused") and test/accounts.test.ts ("nobody but the owner sees the list…").

Done looks like:

[ ] Changing another account's profile, password, role or tokens refuses a member through the same helper, status and words that test/quotas.test.ts and test/accounts.test.ts already assert. A member can still change their own account.
[ ] Test: a member is refused on another account and succeeds on their own.
[ ] Run test/quotas.test.ts and test/accounts.test.ts with it and quote the result; neither changes.