feat: more role backend and admin/writer roles additions and adjustments

web/src/views/IntegrationView.vue

@@ -74,7 +74,7 @@ const authItems = computed(() => {
 
 const authNotes = computed(() => [
 	t(
-		'A key can\'t create, list or revoke API keys, verify or cancel a registration, or call anything under `/v1/system`. Those routes answer 403 "This action needs a real session." An invalid, unknown, expired or revoked key answers 401, even on public routes, and so does a key whose user was deleted or unverified. Owner and admin routes answer 403 to a key whose creator is neither.',
+		'A key can\'t create, list or revoke API keys, verify or cancel a registration, or call anything under `/v1/system`. Those routes answer 403 "This action needs a real session." An invalid, unknown, expired or revoked key answers 401, even on public routes, and so does a key whose user was deleted or unverified. Routes that need a permission answer 403 "missing_permission" to a key when the role of its creator does not hold it.',
 	),
 	t(
 		'Each key can make 120 requests per minute. Beyond that the API answers 429 with a `Retry-After` header.',

web/src/views/__tests__/IntegrationView.spec.ts

@@ -395,7 +395,7 @@ describe('Group scrolled, one card expanded', () => {
 		expect(upload.text()).toContain('the file must be a PNG, JPEG, WEBP, or SVG image')
 
 		const invite = await expand(wrapper, 'POST /v1/user/invite')
-		expect(invite.text()).toContain('Only the owner can do this.')
+		expect(invite.text()).toContain('missing_permission')
 		expect(invite.text()).toContain('This route is rate limited. Too many requests answer 429.')
 		expect(invite.text()).toContain("There's already a pending invite for this address.")
 	})