ryan-crabbe-berri 9b77b5c2cb feat(proxy): let proxy admins choose which team fields team admins may edit ... Team admins could never reach POST /team/update: the route gate answered 401 before the handler's team-admin branch ran. This moves /team/update into the self-managed routes, resolves proxy admin, org admin or team admin inside the handler, and filters team admins through a new proxy-wide UI setting, team_admin_editable_team_fields. The setting is an allow-list of team fields. Empty means team admins cannot edit team settings and get a 403 pointing at the proxy admin, and changing a field outside the list fails 403 naming that field. Only values that differ from what is stored count, since the dashboard resends the whole form. The registry of fields the setting accepts ships empty on purpose. Each field lands in its own follow-up PR with its value diff and dashboard wiring. The Admin UI gains a "Team admin editable fields" section under Settings > UI and a toast on the team page while editing is disabled. Refs LIT-5722 Claude-Session: https://claude.ai/code/session_01A6SkwJdfZUmkzfUkrEkqX8		2026-09-16 15:38:06 -07:00
..
auth	test(auth): freeze prefetch cache clock so the org getter cannot miss on a slow runner	2026-09-14 18:13:49 +00:00
management	feat(proxy): let proxy admins choose which team fields team admins may edit	2026-09-16 15:38:06 -07:00
spend	fix(proxy): attribute gate-rejected requests to their endpoint in cache analytics (#40824)	2026-09-12 16:03:38 -07:00
__init__.py	feat(tests): behavior-pinning harness + Key Tier-1 matrix (#28321)	2026-05-20 19:27:44 -07:00