- Shipped
- 4 செப்டம்பர், 2026 அன்று 2:47 AM UTC
- Author
- Kamo
- Commit
- 3fa3d7e
The org-scoped twin of PlatformOAuthClientController, behind **************** Same DTO shape, same encrypt-on-write, same never-return-a-secret rule, plus platformEnabled — which is what every integration settings screen reads to decide whether "use Kamo's app" is on offer at all. There is no single "manage integrations" right, so each provider is gated on the settings right of the feature that consumes it: the same right that opens the screen the registration is edited from. Microsoft, which is both the mailbox app and the Teams-meetings app, accepts either. CONFIGURE_SYSTEM passes everywhere, as it does elsewhere in settings. A provider with no org-side screen is not addressable here at all, so a typo cannot create a registration nothing would ever read: MeridianLink's secret is per market, and RingCentral and ADP are per-instance credentials with no platform app to replace.