docs(backend): note the /player/* group is role-agnostic self-service #36

wtclaude · 2026-07-22T08:26:23Z

wtclaude commented

2026-07-22 08:26:23 +00:00

Records the behavior shipped in RunicGateway/website#94.

BACKEND_DESIGN.md: the whole /player/* router sits behind requireAuth only (not requireRole('player')). Staff are a superset of players; every handler is self-scoped to the caller, and staff reach the identical handlers under /admin/shard/*. This is why a staff account with linked characters gets its "My characters" and personal notification streams on the mobile client.

Coordinated change

backend: RunicGateway/website#94
app: RunicGateway/Android-app → fix/staff-player-menu

🤖 Generated with Claude Code

AI-assisted: authored with Claude Code (Opus 4.8).

Records the behavior shipped in `RunicGateway/website#94`. `BACKEND_DESIGN.md`: the whole `/player/*` router sits behind `requireAuth` only (not `requireRole('player')`). Staff are a superset of players; every handler is self-scoped to the caller, and staff reach the identical handlers under `/admin/shard/*`. This is why a staff account with linked characters gets its "My characters" and personal notification streams on the mobile client. ## Coordinated change - backend: `RunicGateway/website#94` - app: `RunicGateway/Android-app` → `fix/staff-player-menu` 🤖 Generated with [Claude Code](https://claude.com/claude-code) AI-assisted: authored with Claude Code (Opus 4.8).

wtclaude added 1 commit 2026-07-22 08:26:24 +00:00

docs(backend): note the /player/* group is role-agnostic self-service 30cfa0df1f

Record that the whole /player/* router sits behind requireAuth only (not
requireRole('player')): staff are a superset of players, every handler is
self-scoped to the caller, and staff reach the identical handlers under
/admin/shard/*. This is why a staff account with linked characters gets
its "My characters" and personal notification streams on the mobile
client. Matches the code change in RunicGateway/website.

Co-Authored-By: Claude <noreply@anthropic.com>

whitlocktech approved these changes 2026-07-22 08:28:48 +00:00

whitlocktech merged commit 0251df5bfe into main

2026-07-22 08:28:57 +00:00

whitlocktech deleted branch docs/staff-player-self-service

2026-07-22 08:28:57 +00:00

whitlocktech referenced this issue from a commit

2026-07-22 08:28:59 +00:00

Merge pull request 'docs(backend): note the /player/* group is role-agnostic self-service' (#36) from docs/staff-player-self-service into main

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: RunicGateway/docs#36