FLS3 — the bundle's tightenings all go through the REAL entity path and every one must be PERMITTED (they aim only at non-system roles — test-plan 4.7d's "stays freely restrictable" half), and after a metadata refresh the aggregation reflects them.
FLS3 — the bundle's tightenings all go through the REAL entity path and every one must be PERMITTED (they aim only at non-system roles — test-plan 4.7d's "stays freely restrictable" half), and after a metadata refresh the aggregation reflects them.