- Ya
- 27 Agosti 2026, 07:03 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 6e6119d
Enterprise is negotiated. Hiding the price is presentation; this is the boundary. A request naming the Enterprise plan is refused unless the caller holds **************** so guessing the plan code and posting it directly gets the same answer as reading the console. Fires only on a CALLER-SUPPLIED plan code. The nightly reconcilers amend live subscriptions through the same update path with an empty body and no HTTP request at all - guarding a null would stop billing every negotiated customer. The rule is "you may not NAME this plan", not "this plan may not be touched". Identity is resolved exactly as PlatformAdminInterceptor resolves it, and the verdict is left to the shared PlatformRightsResolver, so this cannot drift from what SecurityService decides about the same person. The refusal names no permission. A customer gets the thing they can act on - contact us - not a hint that a right exists and they might obtain it.