Feat/4311 category permission enforcement - #4553

Merged

thorsten merged 14 commits into

mainfrom

feat/4311-category-permission-enforcement

Aug 10, 2026

Commits on Aug 10, 2026

feat: added category-aware permission checks to the permission contract
thorsten
committed
c30eb95
feat: computed allowed categories per right for medium permissions
thorsten
committed
cdfc810
fix: addressed review findings for allowed-categories computation
thorsten
committed
00f4613
feat: enforced category restrictions when creating FAQs
thorsten
committed
4cd7d38
feat: enforced category restrictions on FAQ update, delete, approve, sticky and listing
thorsten
committed
ed1e49f
test: covered the forbidden path for the sticky FAQ endpoint
thorsten
committed
fbc0a1e
feat: enforced category restrictions on category endpoints and the FAQ edit page
thorsten
committed
1236a9e
feat: hid restricted categories from admin FAQ category trees
thorsten
committed
dba40af
docs: documented category-based permission restrictions
thorsten
committed
af4a177
fix: denied category-restricted users access to uncategorized FAQs
thorsten
committed
836e189
style: applied Mago formatting to category tree filtering
thorsten
committed
b8b2a45
fix: added precise return type annotation for category relations
thorsten
committed
64af5e1
fix: addressed review findings on category restriction enforcement
thorsten
committed
abc49af
test: pinned equivalence of allowed-categories set and per-category checks
thorsten
committed
996e9ec