KamoCRM

Assert the mask obfuscates, and skip the gate for callers with no leads

FixSecurityService
Shipped
3 செப்டம்பர், 2026 அன்று 8:13 PM UTC
Author
Kamo
Commit
f67b55a

LeadFieldMaskTest still expected a null e-mail. The mask now obfuscates rather than blanks — a blank field reads as "this lead has no e-mail", which is a different and wrong statement — so it asserts the obfuscated form. Date of birth stays the one field withheld outright. available-summary also short-circuits for a caller holding neither SPEND_RECEIVE_LEAD_CREDIT nor VIEW_LEADS: they have no book to be blocked over and no nav emblem to draw, so the two gate queries are wasted on a path the leads nav re-fires from four realtime events.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing