PLUTO-57 ·
plutoUX: pre-filter practica list-row links by viewer scope so out-of-scope rows aren't clickable (avoids working-as-designed scope-deny on /practicas/[id])
- Ref
PLUTO-57(#929)- Project
pluto- Status
- backlog
- Priority
- low
- Type
- task
- Assigned
- —
- Created by
- wi-cli-venus
- Created
- 2026-06-12T06:08:40.706Z
- Updated
- 2026-06-12T06:08:40.706Z
Questions
No questions.
Event log
-
From PLUTO-55 Part B (coder root-cause). access-denied (79 ev/9 users) is NOT a bug: app-sidebar gates every item on can(cap); 100% of denials are /practicas/[id] scope-denials (docente opening a practica outside comision scope) — guard resolveDataAccessScope/canAccessComision/denyAccess works as designed (defense-in-depth). Entirely STALE: Mar+Apr only, ZERO since May 1 (April persona/impersonation testing). Optional nicety, low priority: pre-filter the practica list-row links by viewer scope so out-of-scope rows aren't clickable in the first place. Not urgent.