From abd7ee1fc2ecc15b50944db30c59bedc26ec41b6 Mon Sep 17 00:00:00 2001 From: erdgeist Date: Sat, 1 Aug 2026 04:14:00 +0200 Subject: Let Redaktion grant and revoke its own role Any holder may add or remove another account, witnessed as redaktion_grant/revoke so the vouching is legible. Not behind elevation: onboarding must not wait for a keyholder, and a compromised Redaktion account can already publish. --- config/routes.rb | 2 ++ 1 file changed, 2 insertions(+) (limited to 'config/routes.rb') diff --git a/config/routes.rb b/config/routes.rb index 58e1e632..d19ac25b 100644 --- a/config/routes.rb +++ b/config/routes.rb @@ -102,6 +102,8 @@ Cccms::Application.routes.draw do put :reset_otp put :deactivate put :reactivate + put :grant_redaktion + put :revoke_redaktion end end resource :otp_enrollment, :only => [:show, :create, :update, :destroy] -- cgit v1.3