added full access row to operator modal, plus a test for the last-manager guard

The "*" wildcard was never in assignablePermissions, so an operator holding it
(the one the first-run wizard creates) showed every box unticked while having
every right, and there was no way to take it away. Its own row fixes both; the
grid is disabled while it is on, since normalisePermissions collapses "*" plus
anything back to "*".

That made guardManagerRemoval reachable from the UI for the first time, so it
now has an integration test covering the wildcard match and the enabled filter
in its SQL.
This commit is contained in:
onysd 2026-09-11 15:39:08 +03:00
parent c04a8ddc6a
commit 7ad68c3983
4 changed files with 136 additions and 5 deletions

File diff suppressed because one or more lines are too long