- Shipped
- October 5, 2026 at 4:53 PM UTC
- Author
- Kamo
- Commit
- fefcc35
The box's list, audio, read and delete answer only MANAGE_VOIP_SETTINGS (or a god-mode window), and Settings' picker offers only those members, but SharedVoicemailBoxes.setNotify accepted any member of the organization. A member chosen through the API, or one who later lost the right, got VOICEMAIL_RECEIVED cards onto messages that answer them 403. - setNotify refuses 400 unless every chosen member holds MANAGE_VOIP_SETTINGS (at most 25 indexed lookups); - announceShared skips a chosen member who no longer holds it (logged at INFO); the saved list is kept, so a member given the right back is told again. Tests: SharedVoicemailBoxesTest and VoicemailAnnouncerTest pin both (RED: no such constructor); T15's 38 classes plus 3 = 41 classes, 331 tests, 0 failures.