No description

jtricerolph 97a0b50c92 Require at least one capability to see/access apps that define them ... An app-level grant (user_app_perms/role_app_perms) alone used to be enough to show an app's portal tile and pass AuthGate, even with zero capabilities held. Most apps only gate specific routes/buttons with capabilities, not their dashboard/shell, so a role with the app toggled on but no caps granted (e.g. wages, utilities, hvac, plant, tablet-checkin — none of which auto-grant Staff caps) still saw the full app. Apps with no capabilities defined at all keep prior behaviour.		2026-09-25 09:22:47 +00:00
src	Require at least one capability to see/access apps that define them	2026-09-25 09:22:47 +00:00
.env.example	Add internal registry endpoint, self-registration, and workforce sync	2026-07-01 20:35:44 +00:00
.gitignore	Initial commit: auth	2026-07-01 12:09:54 +00:00
docker-compose.yml	Add SETTINGS_URL/SECRET to compose, fix sync email-change and rate-limit bugs	2026-07-02 00:23:59 +00:00
Dockerfile	Initial commit: auth	2026-07-01 12:09:54 +00:00
package.json	Add internal registry endpoint, self-registration, and workforce sync	2026-07-01 20:35:44 +00:00