- Shipped
- October 18, 2026 at 4:42 PM UTC
- Author
- Kamo
- Commit
- 2f90c63
- CallController (call history, own voicemail list/read/archive, queues, agent state), missed-calls-seen, the do-not-contact check and SMS send now check ACCESS_VOIP at the endpoint: the right the softphone, mobile dialer and texting window are opened by, so nobody who uses those screens loses them (owner decision 5). The DNC check also admits MANAGE_VOIP_SETTINGS. - PUT /calls/agent-state answers 400 for a state that is none of the four instead of a 500. - /api/voip/sms/text-templates: list, get, preview and render with ACCESS_VOIP; create, edit, archive and unarchive with MANAGE_VOIP_SETTINGS; org and actor from the session. The internal-auth /sms/templates surface was unreachable from any member session.