lobo 365b69feb4 feat(admin): let admins change user roles ...

V32 adds role_changed_at and the role_change log. Role changes lock
the admin rows, so there is always one admin left; the last admin
cannot delete their own account. Login and refresh read the role
under the user lock. Tokens issued before a role change are refused.

2026-10-04 20:09:22 +02:00

..

java/auth_service

feat(admin): let admins change user roles

2026-10-04 20:09:22 +02:00

resources/contract

feat(admin): let admins change user roles

2026-10-04 20:09:22 +02:00