5 Commits

Author	SHA1	Message	Date
steve	e5f79902fd	http: GET /api/users (list)	2026-05-05 10:57:25 +01:00
steve	56108ffc33	http: session/login reject disabled users; mid-session disable kicks immediately	2026-05-05 10:57:24 +01:00
steve	085fa9684b	http: gated test for admin-band reject of operator (lands fully in B4+E1)	2026-05-05 10:57:24 +01:00
steve	529104b8e4	http: requireRole middleware + 403 forbidden page	2026-05-05 10:57:24 +01:00
steve	8727d6bacc	http: roleAtLeast helper for the role hierarchy	2026-05-05 10:57:24 +01:00