fix: remove canWrite from IAM — it is IAM RBAC, not our app logic

- IAM permissions.can_write defaults to false for all users - Our app controls writes via adminMode + company membership
2026-06-11 16:01:55 +04:00
parent 9a331eec82
commit 9c51e449ab
6 changed files with 2 additions and 20 deletions
@@ -73,7 +73,6 @@ function createRouter({ auth, doubleCsrfProtection, generateCsrfToken, authLimit
          companyId:      iamData.companyId,
          companyName:    iamData.companyName,
          isAdmin:        iamData.isAdmin,
-          canWrite:       iamData.canWrite,
          isImpersonated: iamData.isImpersonated,
          impersonationType:     iamData.impersonationType,
          originalUserEmail:     iamData.originalUserEmail,