- Ya
- 21 Mei 2026, 18:35 UTC
- Mwandishi
- Kamo
- Ahadi ya
- c813373
- MortgageAppController: every endpoint now gates on RoleRightType. Reads require LOS_VIEW_PIPELINE; creating a new application requires LOS_TAKE_APPLICATION; edits accept any LOS write role (take / process / underwrite / close / suspend); deleting requires LOS_SUSPEND_OR_WITHDRAW. KamoLOS's service account already carries the full LOS right set so the borrower journey is unaffected; staff users are gated per their role. - CommerceEngagementController: new GET **************** (list with type/status/date filters) and GET .../engagements/{uid} (detail), gated on ACCESS_COMMERCE. This is the vertical-agnostic counterpart to the mortgage-apps endpoint — same wire format whether you're reading a mortgage, a retail order, or a rental booking.