KamoCRM

Rights on the lead doors the SI tools use, and the caller's own callbacks due (SITP TP10)

FixSecurityService
Shipped
October 18, 2026 at 4:52 PM UTC
Author
Kamo
Commit
46c0fb2

- PUT /leads/{id} takes EDIT_LEADS; a create that assigns someone else takes ASSIGN_LEADS - the lead pool (/leads/available, /leads/accept) takes VIEW_LEADS or SPEND_RECEIVE_LEAD_CREDIT, as its summary - an account's communications take VIEW_ACCOUNTS; a lead's social conversation follows the lead read rule - import runs take CREATE_LEADS (reimport-failed created leads without it); intake endpoints take MANAGE_CRM_SETTINGS - GET /leads/callbacks-due: the caller's pending callbacks (scheduled by them or on their leads), soonest first - the social lookup answered 500 for every lead without a conversation (Map.of with a null) No grant backfill: all 146 roles in production hold every right asked for.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing