A permission granted at own scope no longer opens pages that show the whole workspace

When you grant someone a permission individually, you choose its scope: own, so they see only their own records, or full, so they see the workspace’s. Pages already honoured that choice on lists that narrow to the viewer — leads, proposals, satisfaction. But a page that shows the whole workspace, such as settings or the catalogue, opened for a grant at either scope, and an own-scope grant there showed everything.

Each page now says which scope it needs, and a grant only opens it at that scope.

What changes for you

• Admins who grant a settings, catalogue or onboarding permission at own scope will find it no longer opens those pages — grant it at full scope when the person should manage the workspace’s configuration. Pages that narrow to the viewer, such as leads, proposals, finances and satisfaction, open for either scope as before.
• The scope page under settings now shows, beside each route that follows a permission, the scope a grant needs to open it.
• Invoice and quote pages show a person exactly what the finances list beside them shows. Anyone whose role cannot see finance documents gets a not-found page instead of the document, even if they have the link.

Nothing changes for anyone who reaches these pages through their role’s standard access.