Remove role management from AuthHex; update documentation and user handling to reflect ERP ownership of roles.

2026-10-18 12:45:58 +05:30
parent 703d21d56c
commit fbd079d337
14 changed files with 12 additions and 350 deletions
@@ -30,10 +30,9 @@ namespace AuthHex.Models
        public bool IsMfaEnabled { get; set; }
        public UserMfa? UserMfa { get; set; }

-        //User Role and Type
-        public Guid RoleId { get; set; }
-        public Role? Role { get; set; }
-
+        // Roles are not an authentication concern: the ERP owns a person's role and permissions (users.RoleId in ERPCore).
+        // AuthHex only says who the person is. (The old Users.RoleId column is left in the table, nullable and unmapped,
+        // until it is dropped - see Docs/migrations/2026-10-remove-roles.sql.)
        public Guid UserTypeId { get; set; }
        public UserType? UserType { get; set; }