Fixed
- Deleting a document draft via chat only required view access, not delete access: Anyone in a workspace who could only VIEW finance documents was still able to delete a quote, invoice, or delivery note DRAFT through the AI assistant (chat and the external connection). Deleting now requires delete permission, matching the app.
- Generating an event's budget rows via chat required no finance permission at all: The underlying action previously only checked general workspace membership. It now requires create permission for finance documents.
- Further hardening and consistency: every other line-item, document, payment, and pricing-rule action in the AI assistant now also consistently checks create/edit/delete permission instead of view.