Guide
Product Scope
Product scope is resolved server-side from developer_workspace_member_products. Developer team members support all_products and selected_products scope, and selected-product members are filtered or denied by patched product, credential, customer, purchase, review, analytics, and finance surfaces.
SoundSync
Scope modes
Product permissions and product scope both have to pass.
| Mode | Behavior | Limitation |
|---|---|---|
| all_products | Member can access all current and future products for the workspace when the role permission allows the action. | Dynamic owner workspace scope; product permissions still apply. |
| selected_products | Member can access only mapped product IDs. Phase 7 extends SQL filtering to customers, serials, purchases, exports, reviews, and selected analytics overview. | Partner-linked, promotion-offer, automation/growth-flow, storefront/domain/brand, and older revenue aggregate paths remain partial. |
Aggregate policy
Mixed-product purchases use filtered line projection: scoped members see only accessible line items and accessible line totals. Workspace-level finance routes require all-products scope until product-level accounting allocation is verified.