Drop groupIds from customer data-access filters; keep visibility via group assignees only.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/src/common/data-access.ts

@@ -115,9 +115,7 @@ export function buildContactRuleWhere(
     if (!ids.length) return null;
     and.push(ids.length === 1 ? { ownerId: ids[0]! } : { ownerId: { in: ids } });
   }
-  if (rule.groupIds?.length) {
-    and.push({ groupLinks: { some: { groupId: { in: rule.groupIds } } } });
-  }
+  // groupIds دیگر فیلتر دسترسی نیست؛ دید گروه فقط از مسئول‌گروه (personViaGroupAssignee)
   if (rule.sources?.length) {
     and.push({
       OR: [{ importSource: { in: rule.sources } }, { sourceRef: { in: rule.sources } }],
@@ -188,20 +186,13 @@ export function customersCompanyWhere(
       if (!ids.length) continue;
       and.push(ids.length === 1 ? { ownerId: ids[0]! } : { ownerId: { in: ids } });
     }
-    if (rule.groupIds?.length) {
-      and.push({ groupLinks: { some: { groupId: { in: rule.groupIds } } } });
-    }
+    // groupIds دیگر فیلتر دسترسی نیست؛ دید گروه فقط از مسئول‌گروه (companyViaGroupAssignee)
     if (rule.sources?.length) {
       and.push({
         OR: [{ importSource: { in: rule.sources } }, { sourceRef: { in: rule.sources } }],
       });
     }
-    if (
-      rule.moods?.length &&
-      !rule.owners?.length &&
-      !rule.groupIds?.length &&
-      !rule.sources?.length
-    ) {
+    if (rule.moods?.length && !rule.owners?.length && !rule.sources?.length) {
       continue;
     }
     if (!and.length) continue;
@@ -469,9 +460,14 @@ export function sectionOwnerIdUnion(
     if (rule.owners?.length) {
       sawOwnerRule = true;
       for (const id of ownerIdList(rule, ctx)) ids.add(id);
-    } else if (rule.groupIds?.length || rule.sources?.length || rule.moods?.length ||
-      rule.stageIds?.length || rule.pipelineIds?.length || rule.boardIds?.length ||
-      rule.typeIds?.length) {
+    } else if (
+      rule.sources?.length ||
+      rule.moods?.length ||
+      rule.stageIds?.length ||
+      rule.pipelineIds?.length ||
+      rule.boardIds?.length ||
+      rule.typeIds?.length
+    ) {
       sawNonOwnerRule = true;
     }
   }