Permission enforcement applied to summary widgets, not just detail screens. The project list the dashboard derives from is filtered to the viewer's own crew, and a user with no crew assigned sees none rather than all.
Also called: crew only sees their jobs · dashboard permissions · hide other crews' work
- 1If the role permits viewing all crews, every project is used.
- 2Otherwise the effective crew is resolved and projects are filtered to it.
- 3No effective crew resolves to an empty list, failing closed.
The comment states the risk it closes: it 'Mirrors the GanttChart guard so the dashboard can't leak other crews' work via summary widgets.' Aggregate views are a common blind spot in permission models.
- Summary widgets bypassed the crew scoping enforced elsewhere.
See it on your own jobs
Twenty minutes, your numbers, no slide deck. We’ll build one of your real buildings in front of you and send you the estimate link at the end — yours to keep either way.
or keep browsing features →