fix(capa): field-level auth split, status gate, RLS tightening, audit old_value, hide form on pending_verification

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-07-23 12:10:53 +08:00
parent 938eb7e08d
commit 509ed90fe7
3 changed files with 25 additions and 3 deletions
@@ -100,7 +100,9 @@ export default async function CapaOwnerPage() {
                    <CapaOwnerActions capaId={capa.id} currentStatus={capa.status} />
                  </div>
                </div>
-                <CapaOwnerNotesForm capaId={capa.id} initialNotes={(capa as { owner_notes: string | null }).owner_notes} />
+                {capa.status !== 'pending_verification' && (
+                  <CapaOwnerNotesForm capaId={capa.id} initialNotes={(capa as { owner_notes: string | null }).owner_notes} />
+                )}
              </div>
            )
          })}