- Shipped
- August 12, 2026 at 1:31 AM UTC
- Author
- kamo
- Commit
- fe7ed8f
The member tab is SELF-SERVICE ONLY and gated on identity, exactly like legal-compliance: its endpoints take no member id at all, so it is structurally incapable of showing someone else's hours. checkRight is unusable here -- it returns true for everything under god mode, and the page's own canViewOtherMemberAccount ORs in unrelated rights including **************** HR reaching a specific person's timecard is a different surface at /hr/attendance, attributed to the HR actor. Placed before plans-billing so it stays in the left tab group -- anything after it inherits that tab's alignRight ml:'auto'. The HRS page gains its first real tab beside the ComingSoonTab, registered in SETTINGS_MENU as the coverage test requires in both directions. Both tabs pad themselves on every return path; SettingsView, TabPanel and the motion div all supply zero.