c56cfb30ad
No self-signup: admins create every account in Config -> Benutzer with a typed start password; a forced password change gates first use. Session- cookie auth protects all /api/* routes; /api/users additionally requires the admin role. See docs/authentication.md. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
7 lines
215 B
TypeScript
7 lines
215 B
TypeScript
export const USER_ROLES = ["admin", "user"] as const;
|
|
export type UserRole = (typeof USER_ROLES)[number];
|
|
|
|
export const USER_ROLE_LABEL: Record<UserRole, string> = {
|
|
admin: "Administrator",
|
|
user: "Benutzer",
|
|
};
|