Add panel. prefix to permissions and new editor role

[giuscris]

The intention of this pull request is to improve the user management for Formwork 2.0, and allow in future frontend users (maybe with a plugin).

The major and breaking change is that now all existing permissions, all within the panel, are now prefixed with panel., so they won't collide with future site.* permissions.

It also adds a new editor role to replace the previous user role (now reserved for future usage, e.g. frontend users).

Another important change is that now administrators cannot change passwords of other users. Every user, independently from their role chan change only their own password.

[Copilot]

Pull Request Overview

This PR scopes all existing backend permissions under a panel. prefix and introduces a new editor role, while preventing administrators from changing other users’ passwords.

• Prefix all permission keys in views, controllers, and navigation with panel.
• Add an editor role configuration supporting the main panel modules
• Simplify the Permissions loader and fallback logic in code, and update user/password field behavior

Reviewed Changes

Copilot reviewed 41 out of 41 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
site/users/roles/user.yaml	Removed legacy user permissions block
site/users/roles/editor.yaml	Added new editor role with scoped panel.* permissions
site/users/roles/admin.yaml	Replaced detailed admin permissions with a single panel: true entry
site/schemes/users/user.yaml	Unlocked password and role fields for runtime visibility control
panel/views/...	Updated all has() checks to use the panel. prefix
panel/config/navigation.php	Prefixed navigation item permissions and changed logout to null
formwork/src/Users/Permissions.php	Simplified constructor and updated permission inheritance via beforeLast
formwork/src/Panel/Controllers/...	Prefixed all controller guards to use panel.* keys
formwork/translations/*.yaml	Added user.role.editor labels; updated FR locale

Comments suppressed due to low confidence (2)

site/users/roles/user.yaml:1

• The user.yaml file no longer defines any permissions after removing the block. Regular users will be unable to access any panel actions. Please restore the permissions mapping with appropriate panel.* prefixes.

title: '{{user.role.user}}'

formwork/src/Users/Permissions.php:17

• Wildcard (*) permission handling was removed and no longer short-circuits in has(), which can lead to infinite recursion if has('*') is called. Consider reintroducing an explicit check for '*' before fallback logic.

    public function has(string $permission): bool