mirror of
https://github.com/Tria-plc/emaui.git
synced 2026-08-26 19:12:50 +00:00
Record Result (POST /results) and the detail-modal Save (PUT /results/:id) had no RequirePermission gate, unlike every other action on this page — both routes are backend-guarded (RECORD_EXAM_RESULT, or RECORD_EXAM_RESULT|MODERATE_EXAM_RESULT for the update), the buttons just never mirrored it client-side. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>