- Ya
- 26 Agosti 2026, 18:27 UTC
- Mwandishi
- kamo
- Ahadi ya
- 54bc8b3
The permission editors render one section per enabled app and filter each role's rights by that section's serviceType. There was no EHR section, so all ~30 clinical rights matched nothing and were silently dropped from every editor — security roles, job titles, departments. That made the entire vertical unreachable regardless of licensing. Nobody could be granted VIEW_PATIENTS; with no VIEW_PATIENTS the nav item never renders and no chart opens. Everything behind it was built and none of it could be switched on by an administrator. Patient Records is its own row rather than folded into Commerce. HEALTHCARE is a POS vertical, which makes "Commerce covers every vertical" a tempting reading, but the clinical rights carry ServiceType.EHR and the POS row does not reach them — and an org with POS and no EHR must not be offered rights it cannot use. Both copies of the list are updated: SecurityRoleManager keeps its own inline duplicate. The existing drift test now pins the EHR entry in both, which is the only thing standing between them and the next divergence.