feat: phase 5 - mail plugin RBAC integration with delegate access levels (read/write/delete/full)

2026-07-16 00:34:36 +02:00
parent bb6466b53d
commit a4560344c9
4 changed files with 111 additions and 59 deletions
@@ -329,7 +329,14 @@ class MailSeenBy(Base, TenantMixin):


 class MailAccountDelegate(Base, TenantMixin):
-    """Delegate access to a mail account (read or full)."""
+    """Delegate access to a mail account.
+
+    access_level values:
+    - "read" → Mails lesen, suchen, Threads sehen
+    - "write" → read + Flags setzen, verschieben, Entwürfe speichern
+    - "delete" → write + Mails löschen
+    - "full" → delete + Ordner verwalten + ACLs vergeben
+    """

    __tablename__ = "mail_account_delegates"
    __table_args__ = (