- Ya
- 19 Aprili 2026, 19:35 UTC
- Mwandishi
- Kamo
- Ahadi ya
- d446cf7
**************** now overlays the applied model's 4 default-role templates on top of the existing cascade (org roles → department → job title → member): - Role-type-specific FORCE_GRANTED/FORCE_NUKE wins over all cascade levels. The template is chosen by member type: team-member owners use ADMINISTRATOR, team-members use TEAM_MEMBER, plain members use MEMBER. - DEFAULT template FORCE values win over cascade when the role-type template has no force rule for that right (per Q7 precedence). - DEFAULT non-force values (GRANTED/NUKE) act as last-line-of-defense for rights that resolved to NOT_SPECIFIED after the full cascade. AppliedModelResolverService is injected as @Autowired(required=false) so existing unit-test wirings that only construct the two constructor-mandatory repositories continue to work, degrading to the legacy no-force-rules path.