The official title and membership status are read-only on your own Position card

Shipped

September 23, 2026 at 1:00 PM UTC

Author

Kamo

Commit

56531d0

They join the department and job title under positionRights: a member sees all four on their own Position card, but only a MANAGE_MEMBER_SECURITY holder (or an open god window) changes them, which SecurityService now enforces on both endpoints. The work location and the manager stay the member's own. The note under the card now names all four fields.