From be988eb1453020804320123fee000edaf3bad03e Mon Sep 17 00:00:00 2001 From: tv Date: Sat, 7 Nov 2026 22:35:10 +0100 Subject: access: no manages flag GET /admin/users no longer lists a manages flag per user: whether a user may manage users follows from its capabilities. Auth plan M1 (cleanup). --- src/api/login.rs | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) (limited to 'src/api/login.rs') diff --git a/src/api/login.rs b/src/api/login.rs index 09b8f2e..023408e 100644 --- a/src/api/login.rs +++ b/src/api/login.rs @@ -27,12 +27,11 @@ use serde::Deserialize; use serde_json::{Value as JsonValue, json}; use tracing::{debug, info}; -use super::access::Access; use super::auth::{AuthenticatedUser, Via}; use super::users::CapRequest; use super::{ApiError, error_response}; use crate::access::token::{self, Claims}; -use crate::access::{Capability, Right, registry}; +use crate::access::{Capability, registry}; use crate::state::AppState; /// The token a request came with, as taken (a request extension, set by `bearer`). @@ -289,7 +288,6 @@ pub(crate) async fn whoami( State(state): State, Extension(user): Extension, Extension(via): Extension, - Extension(access): Extension, token: Option>, ) -> Json { let replica = state.doc.read().await; @@ -311,7 +309,6 @@ pub(crate) async fn whoami( "registry": registry::exists(&replica.doc), "caps": entry.as_ref().map(|entry| &entry.caps), "disabled": entry.as_ref().map(|entry| entry.disabled), - "managesUsers": access.allows(Right::Write, ®istry::users_dir()), "token": token, })) } -- cgit v1.3.1