allagroup/alla-allaos-fullstack
Template
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

task-c.1

Browse Source
This commit is contained in:
phaichayon
2026-06-22 15:49:31 +07:00
parent 1b901efc51
commit 3f28fde39f
36 changed files with 2602 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/security/crm-authorization-boundaries.md
View File

@@ -72,7 +72,7 @@ Contact visibility is enforced through customer visibility plus contact ownershi
- if a user can access the parent customer, they can access its contact list within their role boundary
- contact creators retain access to their own contacts
- admin/organization scope retains access
- production shared-contact persistence does not exist yet, so legacy demo sharing is not part of the live authorization boundary
- production contact sharing is persisted through `crm_contact_shares`, so explicit share grants are part of the live authorization boundary
## Approval Boundary