access: no manages flag

GET /admin/users no longer lists a manages flag per user: whether a
user may manage users follows from its capabilities.

Auth plan M1 (cleanup).

1 files changed, 1 insertions, 4 deletions

diff --git a/src/api/login.rs b/src/api/login.rs
index 09b8f2e..023408e 100644
--- a/src/api/login.rs
+++ b/src/api/login.rs
@@ -27,12 +27,11 @@ use serde::Deserialize;
 use serde_json::{Value as JsonValue, json};
 use tracing::{debug, info};
 
-use super::access::Access;
 use super::auth::{AuthenticatedUser, Via};
 use super::users::CapRequest;
 use super::{ApiError, error_response};
 use crate::access::token::{self, Claims};
-use crate::access::{Capability, Right, registry};
+use crate::access::{Capability, registry};
 use crate::state::AppState;
 
 /// The token a request came with, as taken (a request extension, set by `bearer`).
@@ -289,7 +288,6 @@ pub(crate) async fn whoami(
     State(state): State<AppState>,
     Extension(user): Extension<AuthenticatedUser>,
     Extension(via): Extension<Via>,
-    Extension(access): Extension<Access>,
     token: Option<Extension<Token>>,
 ) -> Json<JsonValue> {
     let replica = state.doc.read().await;
@@ -311,7 +309,6 @@ pub(crate) async fn whoami(
         "registry": registry::exists(&replica.doc),
         "caps": entry.as_ref().map(|entry| &entry.caps),
         "disabled": entry.as_ref().map(|entry| entry.disabled),
-        "managesUsers": access.allows(Right::Write, &registry::users_dir()),
         "token": token,
     }))
 }