Jakub Zych f7ca3c4f59 feat: create users with a password and an invitation in the admin ...

- password with confirmation on create, optional reset on update that
  ends the user's sessions; the hash is never returned
- send_invite sends one invitation with an activation link after the
  create commits
- organisation picker, avatar upload shared with the user API and the
  frontend permission editor on the user form
- an email held by a deactivated user answers 422 instead of failing
  on the unique constraint
- the privileged-member guard now also refuses a submitted password

2026-10-05 13:21:51 +02:00

878 B

Raw Blame History

View Raw