# Batoi Press 0.7.0

Batoi Press 0.7.0 enforces the admin roles already stored in user records, making route access and sidebar navigation role-aware.

## What Changed

- Added centralized admin route access rules.
- Blocked unauthorized admin requests with a 403 page.
- Recorded blocked admin route attempts in the audit log.
- Hid sidebar and topbar update links unavailable to the current user's role.
- Added focused role access regression tests.

## Role Access

- Owner: full installation governance and recovery access.
- Admin: full administration, with owner safeguards still enforced by user lifecycle controls.
- Editor: pages, posts, media, menus, and Batoi AIF assist.
- Author: post workflow routes.
- Viewer: dashboard-only access.

## Compatibility

This release is backward compatible with the v0.6.x content format, theme templates, public routes, installer layout, release manifest structure, and update package model.

Existing users without a recognized role fall back to viewer access until an owner or admin updates the role.

## Verification

Admin, update, static-export, role-access, package-structure, checksum, and manifest checks passed before publication.

## Follow-Up

Continue toward `1.0.0` by deciding whether authors need strict own-post-only enforcement and by browser-reviewing each role's admin navigation.
