Fig 1Report vs exportHover to scrub · arrows stepROLE_USER · logged in
Export hatch: report_project_view_export, no IsGrantedReport hatch: report:project and budget_any boltsBoth hatches open into the same hold, because both actions call getData(). The report action carries both guards, so a ROLE_USER is refused there; the export action carries none and hands over the project overview across every customer. Kimai 2.64.0 moves both attributes to the class, so one bar covers every action.