Fixed
- Actions in the AI assistant were possible with view-only permission: Anyone who could only VIEW an area was still able to use the AI assistant (in chat and through the external connection) to grant or revoke app access, create a seating plan, trigger bulk messages to crew or customers, send and reply to emails from the mailbox, create a quote from an email, and add or delete custom holidays. All of these now require the same edit, create or delete permission as in the app. Viewing and reporting are unchanged.
- Function sheets had no permission check: Function sheets could be created, reconfigured and deleted through the AI assistant without the role holding any permission for events. They are now tied to the events permission.
- A seating plan could end up in the wrong workspace: People working in more than one workspace could use the AI assistant to create a seating plan for an event belonging to a different workspace. The assistant now stays strictly inside the workspace you have open.