Marc-André Bombeck f76e5cdafd fix(insights): let a read grant read the record's targets ...

The weight band and the BMI chart read `/api/insights/targets` inside a
shared record, and the route asked for a manage grant, so a read or
write delegate got a 403 and saw no band and no BMI. The targets are
the bands the dashboard snapshot already paints on a whole-record read
grant, computed with no provider, so the read now asks for the same
level. A section-scoped grant is still refused.

2026-11-11 22:54:34 +01:00

..

__tests__

refactor(db): drop the runtime schema mirror

2026-11-03 20:32:35 +01:00

route.ts

fix(insights): let a read grant read the record's targets

2026-11-11 22:54:34 +01:00