- Ya
- 2 Septemba 2026, 23:32 UTC
- Mwandishi
- Kamo
- Ahadi ya
- bf9d22c
Appended to PlatformRightType rather than inserted: getSortOrder() returns ordinal(), so a right added in the middle renumbers every right below it in the console. Grants are @Enumerated(STRING), so appending changes nothing already granted. Deliberately not folded into SYSTEM_USER. That right enters as a visible, separate identity a tenant can see in their own member list and audit trail; this one produces a session nothing downstream can tell from the member signing in themselves. Different questions, different blast radius, so an operator entitled to the first is not thereby entitled to the second. ReportVisibilityTest pinned MANAGE_REPORTS as the LAST value, which appending breaks while proving nothing — the invariant that matters is that nothing was inserted ABOVE it, so it now pins the ordinal instead. Two batch repository lookups for the picker behind it: the memberships a set of users hold in one organization, and which of a set of members are platform administrators. Row-at-a-time that is two queries per name, on a control that re-runs on every keystroke.