Let Redaktion grant and revoke its own role

Any holder may add or remove another account, witnessed as
redaktion_grant/revoke so the vouching is legible. Not behind elevation:
onboarding must not wait for a keyholder, and a compromised Redaktion
account can already publish.

1 files changed, 13 insertions, 1 deletions

diff --git a/app/helpers/node_actions_helper.rb b/app/helpers/node_actions_helper.rb
index f57ef84f..53f6ecd0 100644
--- a/app/helpers/node_actions_helper.rb
+++ b/app/helpers/node_actions_helper.rb
@@ -20,7 +20,9 @@ module NodeActionsHelper
     "otp_disable"        => "shield-off",
     "otp_reset"          => "shield-x",
     "user_deactivate"    => "user-off",
-    "user_reactivate"    => "user-check"
+    "user_reactivate"    => "user-check",
+    "redaktion_grant"    => "user-plus",
+    "redaktion_revoke"   => "user-minus"
   }.freeze
 
   def verb_icon action
@@ -283,4 +285,14 @@ module NodeActionsHelper
     t("node_actions.user_reactivate", :actor => actor_ref(action),
        :target => user_participant_ref(action)).html_safe
   end
+
+  def summarize_redaktion_grant action
+    t("node_actions.redaktion_grant", :actor => actor_ref(action),
+       :target => user_participant_ref(action)).html_safe
+  end
+
+  def summarize_redaktion_revoke action
+    t("node_actions.redaktion_revoke", :actor => actor_ref(action),
+       :target => user_participant_ref(action)).html_safe
+  end
 end