2 Commits

Author	SHA1	Message	Date
Matt Kilgore	9627eb73f1	User edit permission tightening (#2620) ... - Split user edit permision into edit attributes, edit credentials, and edit groups - Only Admins can edit Admin Credentials - Only Admins can Promote/Demote to/from Admin	2021-03-01 15:52:29 -05:00
Alexander Skvortsov	d1dfa758e4	Policy Extender and Tests (#2461) ... Policy application has also been refactored, so that policies return one of `allow`, `deny`, `forceAllow`, `forceDeny`. The result of a set of policies is no longer the first non-null result, but rather the highest priority result (forceDeny > forceAllow > deny > allow, so if a single forceDeny is present, that beats out all other returned results). This removes order in which extensions boot as a factor.	2020-12-08 19:10:06 -05:00