hsiegeln 07f3c2584c fix: syncOidcRoles uses direct roles only, always overwrites ...

- Expose getDirectRolesForUser on RbacService interface so syncOidcRoles
  compares against directly-assigned roles only, not group-inherited ones
- Remove early-return that preserved existing roles when OIDC returned
  none — now always applies defaultRoles as fallback
- Update CLAUDE.md and SERVER-CAPABILITIES.md to reflect changes

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-07 10:56:40 +02:00

..

superpowers

docs: add role-based UI access control design spec

2026-04-06 15:35:59 +02:00

ui-mocks

refactor: rename group/groupName to application/applicationName

2026-03-23 21:21:38 +01:00

design-system-update-instructions.md

docs: mark design system update instructions as done in v0.1.19

2026-03-28 22:20:34 +01:00

SERVER-CAPABILITIES.md

fix: syncOidcRoles uses direct roles only, always overwrites

2026-04-07 10:56:40 +02:00