- Shipped
- 2026年11月15日 13:41 UTC
- Author
- Kamo
- Commit
- eeef9cf
- **************** Overview · Sign-In · Who Can Reach Us · Records · Protection, one route map (app/lib/securitySettings) read by the shell, the registry and ⌘K. The old page, `?tab=` and the Antivirus/Identity `?section=` addressing are gone; every inbound link points at the new addresses. - Gates are the server's (VIEW_ACCESS_LOGS for the logs, MANAGE_DETECTION_RULES for Alert Rules, MANAGE_ACCESS_RULES or MANAGE_CHAT_SETTINGS for the Communication Policy, CONFIGURE_SYSTEM writes Disclosure, MANAGE_ANTIVIRUS_POLICY the policy, god the PHI boundary), asked through useSettingsRightCheck (View As); readers get ReadOnlyRoom. - Managers take a `room` instead of internal tabs; access lists, alert rules and API keys use ONE split button; key list and alert rules are card grids that grow with the width; Identity keeps its sticky preview beside each room. - Recent Changes + Undo on every drill-in through the page's own API (Sign-In, Disclosure, Access Blocks, Antivirus, Communication Policy versions); alert rules and keys are THAT-only. - Ideas: Security Posture Board + Needs You on Overview; Investigate A Person / Address drawer from every log (with Block This Address); Patient Access Report PDF from a record's history; Ready To Enforce meter gating Enforce; Key Hygiene (last-used heat, Unused 90 Days, Rotate With Overlap); Monthly Access Review with Confirm Reviewed; Sign-In Impact Preview before saving; Blocked-Country Map (bundled world outline, no tile server); contact requests approvable inline. - Help: per-tab/section Help & Tips + first-time intros, two new Help Center articles, registry help keys.