fix(auth): reject consumer-only admin sessions

2026-09-07 20:08:27 +08:00
parent e3fcaa4d38
commit 2bc5c5df50
6 changed files with 41 additions and 7 deletions
@@ -44,6 +44,7 @@ export const PERM = {
  ROLE_DELETE: 'auth:role:delete',
  ROLE_ASSIGN: 'auth:role:assign',
  PERMISSION_READ: 'auth:permission:read',
+  PERMISSION_MANAGE: 'auth:permission:manage',
  USER_READ: 'admin:user:read',
  USER_MANAGE: 'admin:user:manage',
 } as const