2 Commits

Author	SHA1	Message	Date
Marcel	fa4bfb8e5c	feat(routes): add server-side WRITE_ALL guard on write-only routes ... Block direct URL navigation to /persons/new, /documents/new, /documents/:id/edit for users without WRITE_ALL permission. E2E tests verify admin user retains access to all write routes. Closes #17 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-20 09:47:52 +01:00
Marcel	0123dffdc4	feat: add create person feature via web interface ... - Backend: new POST /api/persons endpoint in PersonController - Frontend: new /persons/new route with Vorname/Nachname/Alias form, redirects to the new person's detail page on success - Persons list: subtle '+ Neue Person' link below the page title Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-16 16:23:05 +01:00