- Shipped
- October 18, 2026 at 5:21 PM UTC
- Author
- Kamo
- Commit
- 6fcd184
Nine rights in the TP01 block for endpoints that answered any signed-in member of the organization: - MANAGE_PRODUCTS, MANAGE_INVENTORY, MANAGE_RETAIL_CUSTOMERS, MANAGE_FULFILLMENT (RETAIL), MANAGE_RENTALS (RENTAL), MANAGE_PROCUREMENT and APPROVE_PURCHASE_REQUESTS (PROCUREMENT), all children of ACCESS_COMMERCE; - MANAGE_LEAD_CALLBACKS (CRM), a standalone root: the softphone schedules callbacks for members without VIEW_LEADS; - MANAGE_ENCOUNTERS (EHR) under VIEW_CHART: starting, ending and closing a visit asked only for VIEW_CHART. SecurityService seeds each from the right gating the screen that does the work today, so nobody loses access. **************** orgId) answers only for a product of that org; the org-less lookup let a member read another tenant's stock by product id. RoleRightHierarchyTest: 399 values, 276 children, 80 standalone, 123 roots. RpmRightsTest no longer requires 404 to stay the ceiling.