- Shipped
- October 28, 2026 at 4:28 AM UTC
- Author
- Kamo
- Commit
- 128b820
Membership card: Administrator and Organization owner sit beside Membership type, each with its status and, only when SecurityService would accept it (GET .../leadership), a Make / Remove action behind a typed confirmation. A withheld action says why (not on yourself, owners are always administrators, the only owner). Make member is withheld from an owner or administrator until that status goes. The Roles & Permissions tab follows the same answer: its owner switch is offered to administrators too and never for the only owner, and the Administrator role checkbox locks when the change would be refused. Avatars: editing someone else's profile now lists, uploads to, picks from and deletes THEIR avatar library through the member-scoped routes (never the editor's own), and a refused save says so. The "use everywhere" scope is offered only on your own profile or an org-owned AI's.