Administrators can edit the Administrator role, with its lock-out right pinned on

Shipped

October 28, 2026 at 3:12 AM UTC

Author

Kamo

Commit

78078ec

The Administrator (Full Access) role showed as Protected and could not be opened. When the server sends lockedRights (the caller holds that role), the role opens with its rights editable and those rights shown with a lock and the reason, read-only. Branch grant/revoke now passes over forced and locked rows, as each row's own switch already did. The role's security models stay read-only.