mcp: per-user connector access control with deny-by-default grants

web/css/users-roles.css

@@ -136,3 +136,29 @@
   padding: 48px 24px;
   color: var(--placeholder-color);
 }
+
+/* Per-user connector access checklist */
+.um-conn-group        { margin-bottom: 18px; }
+.um-conn-group:last-child { margin-bottom: 0; }
+.um-conn-group-title  {
+  font-weight: 600;
+  font-size: .8rem;
+  text-transform: uppercase;
+  letter-spacing: .03em;
+  color: var(--placeholder-color);
+}
+.um-conn-row {
+  display: flex;
+  align-items: flex-start;
+  gap: 10px;
+  padding: 10px 12px;
+  border: 1px solid var(--card-border);
+  border-radius: var(--radius-sm, 8px);
+  margin-bottom: 8px;
+  cursor: pointer;
+}
+.um-conn-row:hover    { background: var(--bs-tertiary-bg); }
+.um-conn-row input    { margin-top: 3px; flex: 0 0 auto; }
+.um-conn-main         { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
+.um-conn-name         { font-weight: 500; display: flex; align-items: center; gap: 8px; }
+.um-conn-desc         { font-size: .82rem; color: var(--placeholder-color); }