Let Redaktion grant and revoke its own role

Any holder may add or remove another account, witnessed as
redaktion_grant/revoke so the vouching is legible. Not behind elevation:
onboarding must not wait for a keyholder, and a compromised Redaktion
account can already publish.

1 files changed, 2 insertions, 0 deletions

diff --git a/config/routes.rb b/config/routes.rb
index 58e1e632..d19ac25b 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -102,6 +102,8 @@ Cccms::Application.routes.draw do
         put :reset_otp
         put :deactivate
         put :reactivate
+        put :grant_redaktion
+        put :revoke_redaktion
       end
     end
     resource :otp_enrollment, :only => [:show, :create, :update, :destroy]