- Ya
- 11 Mei 2026, 02:10 UTC
- Mwandishi
- kamo
- Ahadi ya
- 807126a
Adds the missing right-gating so a basic Member without ACCESS_MAIL / ACCESS_VOIP can no longer see the Email & Mailbox or Phone Settings tabs on their own account page. Backend already correctly omits those rights from the member's member_rights_applied / ***; the UI was simply rendering the tabs unconditionally. - **************** gates Email tab on ACCESS_MAIL || MANAGE_EMAIL_ACCOUNTS and Phone tab on ACCESS_VOIP || MANAGE_EXTENSIONS || MANAGE_VOIP_SETTINGS, mirroring the existing RolesPermissionsTab gate on MANAGE_MEMBER_SECURITY. - PhoneSettingsTab: hides the VOIP Configuration card's Edit button unless the viewer has MANAGE_EXTENSIONS || MANAGE_VOIP_SETTINGS. Phone Numbers card stays user-editable (personal contact info, not extension assignment). - useUserInfo: adds visibilitychange + 5-min interval refresh that hits POST /api/session/refresh so admin-driven rights changes propagate to live tabs without a logout/login cycle. Background refreshes preserve cached userInfo on transient failure so the UI doesn't flap. - /api/session/refresh: thin proxy forwarding to /api/security/session/refresh on SecurityService.