refactor the auth for user role editing#2228

Merged

Flix6x merged 11 commits into

mainfrom

fix/role-edit-auth

Jul 1, 2026

Commits on Jun 7, 2026

refactor the auth for user role editing, clearer and explicitly about the roles we protect
nhoening
committed

Commits on Jun 9, 2026

Commits on Jun 30, 2026

simplify the loop to check roles - no collection just returning False if we encounter a disallowed entry
nhoening
committed
move import
nhoening
committed
run a regression test case where the first new role is forbidden and the last new role is allowed
nhoening
committed