3 Commits (7cd3ff33bd18cf9ff5adda21f38ded3937f010eb)

Author	SHA1	Message	Date
nexxo	ae1f78f534	fix(admin): shown-once temp password for invited staff; suppress announcements for cancelled windows at send time ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 16:23:21 +02:00
nexxo	bc2e95ba18	fix(admin): block role escalation of non-staff; validate maintenance host ids atomically; rollback ledger on dispatch failure ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 16:01:45 +02:00
nexxo	c5d60340b7	feat(admin): staff RBAC (spatie) + admin settings page ... - 5 operator roles (Owner/Admin/Support/Billing/Read-only) seeded via migration with a capability catalogue; app checks capabilities via Gate, never role names - every mutating admin action authorizes server-side (hosts/datacenters/customers/ impersonate/provisioning); is_admin reads migrated to console.view / isOperator() - admin /settings: own account + Owner-only staff invite/role/revoke with last-owner, self-role and customer-collision guards (transactional) - sidebar 'zum Kundenportal' link replaced with Settings Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 15:47:42 +02:00