[justinaskav]

Authorisation scope for duties, meetings and duplication, and fresher cached access.

• Duty update/create: the institution must exist, and moving a duty requires duty update rights in the destination tenant.
• Duty assignment: a user cannot assign themselves to a duty whose responsibilities they could not grant; assigning anyone to a duty carrying Super Admin or global responsibilities requires super admin or roles.update.*. Ordinary assignments by coordinators are unchanged; refusals are validation errors.
• Meeting institutions: attach is limited to the institutions the picker offers; detach keeps the actor's access through a remaining institution.
• News and calendar duplication require viewing the source and create rights in its tenant.
• Cached access is refreshed when an institution changes tenant or a cadence changes or is deleted, and expires at the end of a secretary's cadence.

Who made what: Codex wrote the change and tests; Claude reviewed it, sent back four test regressions, and ran the full Feature suite.

Check by hand: assigning a rep to a duty as a coordinator; the assignment refusal message; joint meeting attach/detach; duplicating news in your own tenant.

🤖 Generated with Claude Code

[codecov]

Bundle Report

Changes will increase total bundle size by 458 bytes (0.01%) ⬆️. This is within the configured threshold ✅

Detailed changes

Bundle name	Size	Change
vusa-frontend-esm	7.84MB	458 bytes (0.01%) ⬆️

Affected Assets, Files, and Routes:

view changes for bundle: vusa-frontend-esm

Assets Changed:

Asset Name	Size Change	Total Size	Change (%)
assets/php_admin_lt-*.js	228 bytes	343.26kB	0.07%
assets/php_admin_en-*.js	230 bytes	322.1kB	0.07%

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!