- Shipped
- August 24, 2026 at 11:47 PM UTC
- Author
- Kamo
- Commit
- ed53f59
Five rights, 234-238, in the MARKETING group and hung off VIEW_REFERRAL_CODES: a leaderboard of referral numbers is tracking-code data, and a member who may not see the Tracking Codes tab has no business on it. The widget right — not VIEW_ALL_MEMBER_TRACKING — is what discloses other members' totals, and that is deliberate. 200/201 gate the ANALYTICS: whose visitors, whose addresses, whose timelines, resolved per target member by the scope resolver. A scoreboard discloses a name, a rank and one number, to everyone at once. Requiring the org-wide analytics right would leave it visible only to the administrators who hold one, which is a report rather than a board. Deliberately NOT seeded, for the same reason 200 and 201 are not: seeding would publish every existing holder's referral totals to their colleagues on the boot that shipped it, which is a disclosure decision made by a deploy rather than by an administrator. 229/166/32/31 in the audited shape — all five are children and VIEW_REFERRAL_CODES is itself a child of VIEW_MARKETING, so neither root bucket moves.