Approval-tier relay with role resolved from rights

FeatureSecurityService
Ya
12 Agosti 2026, 02:08 UTC
Mwandishi
Kamo
Ahadi ya
6b5542e

THE ROLE IS DECIDED HERE, from the caller's rights and their relationship to the subject -- never from the request body. A body that could name its own role would let anyone claim to be payroll. Precedence: PAYROLL (broadest, edits in any state), then MANAGER, then EMPLOYEE for one's own record. Being the subject's snapshotted manager counts on its own -- a line manager approving their own report is the ordinary case and should not need an org-wide right; the right exists for everyone else who reviews. isManagerOf fails CLOSED: an unresolvable reporting line is not authority.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei