- Shipped
- May 21, 2026 at 6:35 PM UTC
- Author
- Kamo
- Commit
- c813373
- MortgageAppController: every endpoint now gates on RoleRightType. Reads require LOS_VIEW_PIPELINE; creating a new application requires LOS_TAKE_APPLICATION; edits accept any LOS write role (take / process / underwrite / close / suspend); deleting requires LOS_SUSPEND_OR_WITHDRAW. KamoLOS's service account already carries the full LOS right set so the borrower journey is unaffected; staff users are gated per their role. - CommerceEngagementController: new GET **************** (list with type/status/date filters) and GET .../engagements/{uid} (detail), gated on ACCESS_COMMERCE. This is the vertical-agnostic counterpart to the mortgage-apps endpoint — same wire format whether you're reading a mortgage, a retail order, or a rental booking.