@7365admin1/core 3.65.0 → 3.65.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @iservice365/core
 
+## 3.65.1
+
+### Patch Changes
+
+- 69714b4: Role writes: a site's own module list narrows a role only when the site belongs to the role's organisation. A service provider's role at a client's site is no longer refused modules the client switched off for that site — matching what the role editor now offers.
+
 ## 3.65.0
 
 ### Minor Changes

package/dist/index.js

@@ -11758,6 +11758,13 @@ function effectiveSiteModules(orgModules, siteModules) {
   const allowed = site.filter((key) => org.includes(key));
   return allowed.length ? allowed : org;
 }
+function siteModulesForOrg(site, orgId) {
+  const org = orgId?.toString() ?? "";
+  if (!org)
+    return site?.metadata?.modules;
+  const owner = String(site?.orgId ?? site?.org ?? "");
+  return owner && owner === org ? site?.metadata?.modules : void 0;
+}
 function rejectedSiteModules(orgModules, requested) {
   if (!narrows(orgModules))
     return [];
@@ -21037,7 +21044,7 @@ async function moduleCeiling(org, site) {
     ]);
     return effectiveSiteModules(
       orgDoc?.modules,
-      siteDoc?.metadata?.modules
+      siteModulesForOrg(siteDoc, orgId)
     );
   } catch {
     return [];