Add RoleRightsSyncRunner to backfill missing role rights

Shipped

March 22, 2026 at 9:13 PM UTC

Author

Kamo

Commit

6b5b757

When new RoleRightType entries are added to the enum, existing roles don't have OrgRoleRight entries for them. This runner checks all roles on startup and adds missing entries — GRANTED for admin roles, defaultSetting for others. Safe to re-run, only inserts missing entries.