RBAC is enforced (lib/permissions.ts, GUEST/MEMBER/ADMIN/OWNER) but roles can only be changed in the DB. Add admin UI.
Scope
- Members settings: invite by email, change role, remove member (ADMIN/OWNER only).
- Workspace settings: name, color/avatar.
- Pending-invite flow (email or invite link).
Acceptance
- An ADMIN can invite a user, set them to MEMBER, and later remove them — all from the UI.
RBAC is enforced (
lib/permissions.ts, GUEST/MEMBER/ADMIN/OWNER) but roles can only be changed in the DB. Add admin UI.Scope
Acceptance