Relay bulk operations and attendance

Shipped

August 12, 2026 at 7:01 AM UTC

Author

Kamo

Commit

26a66d0

The bulk approval role is DERIVED here from the caller's rights and appended to the path — never read from the body. A body-supplied role is a body-supplied promotion, and this endpoint approves hundreds of wage records at once. Attendance points follow the same identity-first rule as everything else about one named person: own on identity, anyone else's needs MANAGE_TIMECARDS.