Security to-do list: accepted items, kept on the server

2026-09-28 21:22:43 -07:00
parent 4c5583e725
commit eea96e8674
26 changed files with 1107 additions and 5 deletions
@@ -312,7 +312,10 @@ impl Default for DefaultPermissions {
                | Permission::SysDlpPolicyGet
                | Permission::SysDlpPolicyUpdate
                | Permission::SysDlpReviewGet
-                | Permission::SysDlpReviewUpdate => {
+                | Permission::SysDlpReviewUpdate
+                // inbuxa: every security check is server-wide (security
+                // to-do list spec)
+                | Permission::SysSecurityAccept => {
                    default.superuser.push(permission);
                }
                // inbuxa: journals are the server's; administrators set them