ADR-003: Owner-only actions
Status: accepted 6 September 2026 (D10).
Context
Section titled “Context”The role model treated owner and admin identically. A shop needs one accountable role for actions that end or hand over the business.
Decision
Section titled “Decision”workspace.delete and workspace.transfer are owner-only. Admins hold every other permission, including settings and credentials. The rest of the matrix is on Roles and permissions.
Consequences
Section titled “Consequences”- Policies and the matrix test enforce the split; the UI hides the actions for admins.
- No routes exist yet for either action; the permissions are ready for team management.