feat(roles): add full CRUD API with account_owner scoping (EVO-1061)#21

Merged

dpaes merged 3 commits into

May 14, 2026

Commits on May 11, 2026

feat(roles): add full CRUD API with account_owner scoping (EVO-1061)

marcelogorutuba
and
claude
committed

Commits on May 13, 2026

fix(auth): address EVO-1061 review blockers (H1, M1-M3)

marcelogorutuba
and
claude
committed

Commits on May 14, 2026

fix(auth): close privilege escalation via delegation in roles controller (EVO-1061)

marcelogorutuba
and
claude
committed