fix: prune unused RBAC permissions

2026-07-17 17:43:45 +08:00
parent b3d0bafc22
commit 7edb4ff853
6 changed files with 97 additions and 29 deletions
--- a/apps/server/src/rbac/rbac.permissions.spec.ts
+++ b/apps/server/src/rbac/rbac.permissions.spec.ts
@@ -10,7 +10,7 @@ describe('preset role permissions', () => {
  it('keeps teachers read-only in scheduling while preserving class attendance access', () => {
    const teacher = permissionsFor('teacher');

-    expect(teacher.groups).toEqual(['notification', 'profile']);
+    expect(teacher.groups).toEqual(['notification']);
    expect(teacher.extras).toEqual(
      expect.arrayContaining([
        'teacher-workspace:view',