Permissions: rename Grants, add wildcards, local groups, profile

- Rename Grant -> Permission end-to-end (model, routes, view, frontend,
  bootstrap) and add an idempotent redis migration for existing records.
- utils/roles.js: glob domain matching (* = one label, ** = any depth) against
  the full host; authz passes the full hostname.
- Local groups: LocalGroup model + admin routes/UI; membership merged into
  Permission.effectiveFor so app groups behave like SSO groups.
- Subject autocomplete via GET /api/permission/subjects (users + derived groups).
- User profile page (/profile) and username in the navbar; /api/user/me now
  returns merged/local/external groups.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

This commit is contained in:

William Mantly

2026-07-11 10:54:15 -04:00

parent 098ff5bc9b

commit 2acc3644c4

20 changed files with 858 additions and 120 deletions

									
										nodejs/models/index.js
									
		+2
		-1
	
												View File
												
				@@ -11,5 +11,6 @@ require('./dynamic_record');

				require('./host');

				require('./token');

				require('./user');

				require('./grant');

				require('./local_group');

				require('./permission');

				require('./oidc_state');