Aaron Kimbrell 0794cf48dd feat(permissions): API key scopes that narrow permission and rank checks ...

A key's effective permission is its scope AND its owner's current
permission. Scoped variants of Allowed, CanViewCharacter, ForLevel and
ManageDenialNow; keys need self_* and manage_equal_rank in their scope
to act on their owner or equal ranks, even for GM 9 owners. Adds the
api_keys_manage permission and NotGrantable for key creation.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-28 22:31:02 -05:00

3.4 KiB

Raw Blame History

View Raw