1 Commits

Author	SHA1	Message	Date
Aaron Kimbrell	0794cf48dd	feat(permissions): API key scopes that narrow permission and rank checks ... A key's effective permission is its scope AND its owner's current permission. Scoped variants of Allowed, CanViewCharacter, ForLevel and ManageDenialNow; keys need self_* and manage_equal_rank in their scope to act on their owner or equal ranks, even for GM 9 owners. Adds the api_keys_manage permission and NotGrantable for key creation. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-28 22:31:02 -05:00