31740b3949
Post-migration, Technicians (now group_fp_technician) have read on fp.job but NOT on sale.order / fp.part.catalog / fusion.plating.customer.spec. The kanban render path tries to access job.sale_order_id.x_fc_po_number and AccessErrors silently — kanban returns empty, user sees blank 'Shop Floor' page. Fix: `job = job.sudo()` at the top of _render_card. The output is denormalized display data, no security concerns; ACL gating is still enforced by the caller's access to fp.job (which Technician does have). CLAUDE.md rule 13m documents the broader pattern: any dashboard / tablet / kanban controller surfacing cross-module data to low-priv roles needs this sudo at the helper top. Module version: 19.0.32.0.8 -> 19.0.32.0.9 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>