- Shipped
- 27 ஆகஸ்ட், 2026 அன்று 8:53 AM UTC
- Author
- Kamo
- Commit
- 2298d6a
toDto is an explicit allowlist and updateConfig takes a typed body, so the seven new SYSTEM_CONFIGURATION columns would have been invisible and unsettable — the platform settings card would have rendered empty and saving would have done nothing. The administrator password is never returned. It is the master credential behind every tenant account, so a GET yields the sentinel "***" when set, and sending "***" back means keep — otherwise saving any other field on the form would overwrite the credential with the literal string. Gated by MANAGE_VOIP_SMS alongside the existing VoIP fields, so MANAGE_DOCUMENT_AI cannot reach it.