Authorize Staff and Member Access on the Server

Context

Permission scope and record eligibility are independent boundaries. The recorded staff scope is association-wide, and hidden member records are answered as not found.

Decision

Console access is association-wide under route permissions, while member reads and actions use server-side participation checks, with extra restrictions for confidential decisions and sensitive disclosures.

Alternatives Considered

Apply organizational-unit console grants immediately. That requires Platform scope work outside the chosen staff baseline.

Rely on member screens to hide unauthorized records. A direct operation call could bypass a client-only restriction.

Consequences

Opening and nomination permissions declare an organizational-unit resource type that the console routes do not enforce, under recorded temporary exceptions. The meeting projection reports a chair or liaison management flag; it does not establish implemented portal attendance-edit routes.