feat(web): RBAC access guard on users settings page (MS21-RBAC-002/003/004) #580
Reference in New Issue
Block a user
Delete Branch "feat/ms21-rbac-settings"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Adds role check on /settings/users — non-admin users see Access Denied instead of user management UI. RBAC-003 (MemberList action gating) and RBAC-004 (sidebar role display) confirmed already implemented in prior PRs.