KamoCRM

A report scoped by the reporting line gets the caller's line, whatever their rights

FeatureSecurityService
Shipped
November 2, 2026 at 2:26 PM UTC
Author
Kamo
Commit
cc06866

Owner, 2026-11-02: a generic right opens a report about people's activity and never widens its rows. For a definition marked scopedByReportingLine(), the resolver now answers from ReportingLine over the cached org graph: the org owner (the graph's owner flag) sees the organization; anyone else gets TEAM over everyone below them, however deep (SELF when nobody is), and never a peer or anyone above. A graph that can't be read leaves SELF. Break-glass still widens, as for every report. Every other report is unchanged.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing