Enforce tenant module availability in Views

2026-08-04 08:21:50 +02:00
parent 4da8282234
commit f271ca2b55
4 changed files with 123 additions and 20 deletions
@@ -349,8 +349,11 @@ manifest = ModuleManifest(
                "and system assignments. Pinning preserves one published revision; an "
                "unpinned assignment follows later publications. Required Views must keep "
                "the selector and administration escape surfaces. Hiding a surface never "
-                "grants or revokes authorization, and inherited definitions or assignments "
-                "must be changed in their owning scope."
+                "grants or revokes authorization. The surface catalogue is constrained by "
+                "the active tenant's module entitlement, so a View cannot expose a module "
+                "that system policy made unavailable or the tenant disabled. Saved references "
+                "to such surfaces remain in immutable revisions and are reported as stale. "
+                "Inherited definitions or assignments must be changed in their owning scope."
            ),
            documentation_types=("admin",),
            audience=("administrator", "power_user", "workflow_designer"),