- Shipped
- 15 Agosti 2026, 06:16 UTC
- Author
- kamo
- Commit
- ca96cf2
VIEW_MATERIALS and VIEW_SOCIAL_MEDIA now have server enforcement, alongside their MANAGE counterparts which were client-only. 29 endpoints across seven MediaService controllers checked ownership and no right. The signed public material link stays open — token-authenticated, no session — as do the OAuth callback, the provider webhook and the internal social endpoint. Referral codes are kept rather than deleted, and the reasoning is recorded because it goes against the standard applied to VIEW_EMAIL_LOGS. There is nothing behind them — no table, no Java file matching *Referral*, no endpoint, no UI, and the only frontend matches are lead prospect types. But the MARKETING AppType advertises "social media, marketing materials, and referral codes" and is marked COMPLETED, so the platform claims the feature; and an hour earlier six rights were nearly written off as dead because a tool was wrong. The right response to that is to raise the bar for deletion, not to keep swinging. VIEW_BULK_EMAIL is left for its own cluster: MANAGE_BULK_EMAIL is genuinely enforced in **************** so the read side needs that and EmailService's CampaignController read together.