Repository navigation

fix(rbac): resolve lock-order deadlocks between sessions, users, groups and roles - #31

Merged

VibeSWE merged 6 commits into

mainfrom

fix/rbac-session-lock-order

Oct 13, 2026

Merged

fix(rbac): resolve lock-order deadlocks between sessions, users, groups and roles#31
VibeSWE merged 6 commits into
mainfrom
fix/rbac-session-lock-order

Commits on Oct 12, 2026
- fix(rbac): enforce one lock order for sessions, users, groups and roles
  
  VibeSWE
  and
  claude
  committed
  56c63bf
- fix(rbac): stop re-reading USERS while rendering Prism users
  
  VibeSWE
  and
  claude
  committed
  7b599e4
- fix(rbac): close the /login stale-session race and verify Basic logins unlocked
  
  VibeSWE
  and
  claude
  committed
  dbc8b9b
- test(rbac): pin put_user's SESSIONS hold and name deadlocked tests
  
  VibeSWE
  and
  claude
  committed
  6e1e1f2
- fix(rbac): persist group removals before updating memory
  
  VibeSWE
  and
  codex
  committed
  c8761f4
Commits on Oct 13, 2026
- test(rbac): drive /login's real cookie exchange in the lock-order tests
  
  VibeSWE
  and
  claude
  committed
  ccb2f22