Both PedsHub apps now take admin and moderator from the same two Authentik groups. oidc.admin_groups and oidc.moderator_groups name them; unset means local roles stand. Applied at every sign-in so removal at the SSO demotes here, and never applied to the last admin — a group edit must not be able to lock everyone out of the panel. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Dv6sqaY6Vq3ChZHMem3cnU |
||
|---|---|---|
| .. | ||
| db | ||
| middleware | ||
| routes | ||
| utils | ||