- Shipped
- 7 ஆகஸ்ட், 2026 அன்று 1:14 AM UTC
- Author
- kamo
- Commit
- 00838d1
The Access Security and Administration groups existed only in SecurityRoleManager as inline name lists, so JobTitleManager, DepartmentManager and RolesPermissionsTab lumped every serviceType-less right into General. Rather than add a fourth copy, the group definitions move to permissionGroups.ts and all four editors read them. isGeneralPermission is the reason that matters: filtering on !serviceType alone would render a carved-out right twice, once in General and once in its own section, giving one setting two independent toggles. MembershipPermissionsTab is deliberately untouched - its General Permissions list is a hardcoded read/write/delete/admin mock, not real rights data. /settings/account and its landing section now also admit the finance rights. A controller holding only MANAGE_ORG_FINANCES would otherwise be redirected straight back to /settings; widening only one of the two would leave the page reachable by URL but invisible in the nav.