From abd7ee1fc2ecc15b50944db30c59bedc26ec41b6 Mon Sep 17 00:00:00 2001 From: erdgeist Date: Sat, 1 Aug 2026 04:14:00 +0200 Subject: Let Redaktion grant and revoke its own role Any holder may add or remove another account, witnessed as redaktion_grant/revoke so the vouching is legible. Not behind elevation: onboarding must not wait for a keyholder, and a compromised Redaktion account can already publish. --- app/helpers/node_actions_helper.rb | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) (limited to 'app/helpers') diff --git a/app/helpers/node_actions_helper.rb b/app/helpers/node_actions_helper.rb index f57ef84f..53f6ecd0 100644 --- a/app/helpers/node_actions_helper.rb +++ b/app/helpers/node_actions_helper.rb @@ -20,7 +20,9 @@ module NodeActionsHelper "otp_disable" => "shield-off", "otp_reset" => "shield-x", "user_deactivate" => "user-off", - "user_reactivate" => "user-check" + "user_reactivate" => "user-check", + "redaktion_grant" => "user-plus", + "redaktion_revoke" => "user-minus" }.freeze def verb_icon action @@ -283,4 +285,14 @@ module NodeActionsHelper t("node_actions.user_reactivate", :actor => actor_ref(action), :target => user_participant_ref(action)).html_safe end + + def summarize_redaktion_grant action + t("node_actions.redaktion_grant", :actor => actor_ref(action), + :target => user_participant_ref(action)).html_safe + end + + def summarize_redaktion_revoke action + t("node_actions.redaktion_revoke", :actor => actor_ref(action), + :target => user_participant_ref(action)).html_safe + end end -- cgit v1.3