- Shipped
- August 12, 2026 at 6:34 AM UTC
- Author
- Kamo
- Commit
- 4606e0d
An EMPLOYEE may correct their own record — that is the point of the editor, and refusing it leaves the employee with no way to say the clock was wrong about a day they are the only witness to. What they cannot do is make it count: the correction lands as an adjustment on a timecard that still has to move through the approval chain. Identity is resolved through resolveRole, which checks the subject BEFORE consulting any right. God mode makes checkRight return true for every right, so anything describing one named person has to admit that person on identity alone. It also has to work for a member in the restricted tier, who holds no rights at all and still has a statutory right to their own hours.