- Ya
- 22 Agosti 2026, 02:11 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 8d30955
The mail and lead widgets follow their data rights exactly as the calendar ones do — ACCESS_MAIL and VIEW_LEADS — so a holder gains no data they could not already reach and the widgets do not ship invisible. The timecard widget has no data right to inherit from, because a member's own punches are gated by their persisted enrollment rather than by a right. Seeding it from MANAGE_TIMECARDS would have handed it to the HR administrators, who mostly do not punch a clock, and to nobody who does. UNIVERSALLY_SEEDED_RIGHTS is that gap, with a deliberately high bar written into its javadoc: a right belongs there ONLY when the capability behind it is gated by something other than a right, so granting it to everybody grants nobody anything they could not already do. It is not a shortcut for 'we would like most people to have this'. REQUIRED is excluded from every one of these, as everywhere: it is the one policy that takes a member's choice away, and that is an organization's decision to make.