- Ya
- 9 Agosti 2026, 01:47 UTC
- Mwandishi
- Kamo
- Ahadi ya
- d179e41
Branch Types -> Allowed Apps started loading its app list from /platform-config/app-catalog, which requires a top-level org owner. The host page is gated on CONFIGURE_SYSTEM instead, so for every tenant the GET 403'd: the editor rendered zero apps and the save handler then refused to save the security model at all — blocking its name, age ranges, roles and commerce types, none of which involve the catalog. It failed for a KamoCRM admin without isOrganizationOwner too. **************** serves the same resolved catalog under CONFIGURE_SYSTEM, as a deliberately narrower projection: type, display name, description, stage, available, deprecated. No operator note, no enum defaults, no entitlement diagnostics — those describe how the platform is run, and the writes stay platform-owner-only.