docs(BA-6836): add news fragment

jopemachine · claude · jopemachine · commit 2c9e3200e11d · 2026-07-13T14:29:17.000+09:00
Co-Authored-By: Claude Opus 4.8 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/changes/12759.feature.md b/changes/12759.feature.md
@@ -0,0 +1 @@
+Authorize AppConfig fragment writes against the allow-list `permission` (`ro`/`rw`) policy so a user can manage their own user-scope fragment while public/domain layers stay superadmin-only; fragment write endpoints move from superadmin-only to authenticated with per-write ownership checks (BEP-1052).

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	+Authorize AppConfig fragment writes against the allow-list `permission` (`ro`/`rw`) policy so a user can manage their own user-scope fragment while public/domain layers stay superadmin-only; fragment write endpoints move from superadmin-only to authenticated with per-write ownership checks (BEP-1052).