- Ya
- 11 Mei 2026, 02:09 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 8e07b5b
Adds three things needed for template edits to actually reach existing members without forcing a logout/login cycle: 1. **************** — walks every org pointing at the model (via masterModelID or branch-type) and chunked-recalcs each member's member_rights_applied. Companion recalcAllMembersUsingBranchType handles the single-branch-type case. 2. Chunked **************** — bulk-delete + saveAll per 500-member chunk so a 50k-member org no longer fires per-row statements. 3. applyTemplateRules precedence fix — typeTemplate non-force GRANTED/NUKE now fills NOT_SPECIFIED before the DEFAULT non-force fallback. Matches the UI labels ("Default enabled; child can disable") and prevents module-access rights on TEAM_MEMBER from being silently ignored. Also exposes computeMemberRights as a public read-through for the new session-refresh and diagnostic endpoints in SecurityService.