- Shipped
- August 15, 2026 at 5:45 AM UTC
- Author
- Kamo
- Commit
- 47fe5a5
VoipVoicemailController required VIEW_CALL_LOGS on exactly one path — playback, and only when the organization handles PHI. Listing voicemails with their transcriptions, marking them read and deleting them required no right at all, in any organization. That conditional check is a good one and it stays. It answers a different question: whether this recording may be disclosed under HIPAA. VIEW_VOICEMAIL and MANAGE_VOICEMAIL answer whether the caller may work with voicemail at all, and a member can be cleared for one and refused the other. List and audio take VIEW_VOICEMAIL; mark-read and delete take MANAGE_VOICEMAIL. Permanent delete keeps VOIP_VOICEMAIL_PERMANENT_DELETE in CallController. No seeding. VIEW_VOICEMAIL, MANAGE_VOICEMAIL, VIEW_CALL_LOGS and ACCESS_VOIP are held by the same 16 roles and the same 47 members, so nobody who can reach voicemail today loses it. The PHI test now adds VIEW_VOICEMAIL to every session it builds. Without it each case would stop at the first gate and none would reach the PHI decision the test exists to pin — the fixture has to grant the new baseline for the old rule to stay under test.