docs(backend): note the /player/* group is role-agnostic self-service #36

Merged
whitlocktech merged 1 commits from docs/staff-player-self-service into main 2026-07-22 08:28:57 +00:00

1 Commits

Author SHA1 Message Date
30cfa0df1f docs(backend): note the /player/* group is role-agnostic self-service
Record that the whole /player/* router sits behind requireAuth only (not
requireRole('player')): staff are a superset of players, every handler is
self-scoped to the caller, and staff reach the identical handlers under
/admin/shard/*. This is why a staff account with linked characters gets
its "My characters" and personal notification streams on the mobile
client. Matches the code change in RunicGateway/website.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-22 02:18:22 -05:00