feat(acl): deep data access by section for roles and users

Role default + user override with OR rules; covers customers, leads, sales, activities, notes, routines, projects, and tickets.
2026-10-22 11:53:26 +03:30
parent cb5944e767
commit 09a60b3b5a
25 changed files with 1997 additions and 122 deletions
@@ -35,7 +35,13 @@ const cardInclude = {

 type CardActor = Pick<
  Actor,
-  'userId' | 'role' | 'dataVisibility' | 'visibleUserIds'
+  | 'userId'
+  | 'role'
+  | 'dataVisibility'
+  | 'visibleUserIds'
+  | 'scopes'
+  | 'projectsAccess'
+  | 'teamPeerIds'
 >;

@Injectable()