Guilhem LemouelandClaude Opus 5.5 8bba9e92f9 feat: gate forking behind a role capability ...

Forking becomes the `fork` capability of a workspace role: `developer` holds it, `operator` and
other roles do not until an admin grants it per role, in the instance roles or a workspace
override. Both fork endpoints refuse a role without it; until now only the frontend hid the
entry. A member who forks is a developer in the fork. A role without it keeps a disabled
"Workspace fork" entry in the workspace picker explaining how to get it.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-22 06:57:11 -07:00

1.2 MiB

Raw Blame History