Relay the editor, authorized by identity before rights

FeatureSecurityService
Ya
12 Agosti 2026, 06:34 UTC
Mwandishi
Kamo
Ahadi ya
4606e0d

An EMPLOYEE may correct their own record — that is the point of the editor, and refusing it leaves the employee with no way to say the clock was wrong about a day they are the only witness to. What they cannot do is make it count: the correction lands as an adjustment on a timecard that still has to move through the approval chain. Identity is resolved through resolveRole, which checks the subject BEFORE consulting any right. God mode makes checkRight return true for every right, so anything describing one named person has to admit that person on identity alone. It also has to work for a member in the restricted tier, who holds no rights at all and still has a statutory right to their own hours.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei