- Ya
- 2 Septemba 2026, 23:25 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 989668c
A brand-new right is granted to NOBODY on the day it deploys. These two are deliberately absent from **************** — seeding them from an existing right would hand an organization's sales wording to whoever happened to hold whatever it was seeded from — so on day one the only person who can grant MANAGE_SALES_SCRIPTS is the owner. Gating the writes solely on that right therefore locked out the one person able to unlock it. Reported as "I am an admin and I don't see the Sales Scripts tab", which is what this looks like from the outside. The owner branch reads teamMember.isOrganizationOwner off the session, and matches OrgReceivablesController's, which carries this exact reasoning in its own comment. The settings tab mirrors it on the client — the two have to agree, or the tab opens onto a 403. canView now delegates to canManage rather than checking MANAGE itself, so the owner can read what they can write without a second branch to keep in step.