Assert the mask obfuscates, and skip the gate for callers with no leads

FixSecurityService
Shipped
September 3, 2026 at 8:13 PM UTC
Author
Kamo
Commit
f67b55a

LeadFieldMaskTest still expected a null e-mail. The mask now obfuscates rather than blanks — a blank field reads as "this lead has no e-mail", which is a different and wrong statement — so it asserts the obfuscated form. Date of birth stays the one field withheld outright. available-summary also short-circuits for a caller holding neither SPEND_RECEIVE_LEAD_CREDIT nor VIEW_LEADS: they have no book to be blocked over and no nav emblem to draw, so the two gate queries are wasted on a path the leads nav re-fires from four realtime events.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing