Process member uploads like org bg + gate by new rights

FeatureSecurityService
Shipped
July 9, 2026 at 8:04 AM UTC
Author
Kamo
Commit
7024a94

- New ImageResizeClient runs member background uploads through the SAME post-processing as org backgrounds (POST **************** and stores the result as .webp. - ThemeBackgroundController: authorize all five endpoints by the new rights — MANAGE_OWN_BACKGROUND_IMAGES for your own member, **************** for another member (a superset; god-mode bypasses). Reads resolve the target member's user so admins can list/serve others' images; uploads store under the target member's user. - New GET /theme-backgrounds/active returns the session member's own slideshow image URLs (empty => org fallback) for the global background layer. Rights auto-seed on boot via RoleRightsSyncService (needs the new shared-lib, which the CI clones). No KamoInitializer run required.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing