Insights permissions and states

Insights combines a service-wide organization-membership gate with narrower checks on a small set of portfolio and sharing actions.

Route access

Visitor	Insights access
Signed out	Redirected to authentication before the Insights landing page or an organization route opens.
Signed in without membership in the URL’s organization	Cannot open that organization’s Insights routes.
Organization Admin, Member, or Guest membership	Passes the current organization route gate. The route does not itself distinguish among the three membership roles.

The current service visibility registry adds no separate Insights feature flag. Data queries and record lookups still scope reports, email insights, and articles to the current organization.

Action boundaries

Most Insights pages rely on the organization-membership gate. The current report-create, article, report-status, extraction, and investor-email handlers do not add an admin-only role check.

Additional checks apply here:

Action	Additional rule
Remove a company from a portfolio	Requires manage_investment_vehicle_portfolios.
Copy prior report sections, mark or revert company exits, or remove a company	Requires manage_investment_vehicle_portfolios.
Open or manage Sharing	Requires manage_investment_vehicle_portfolios; the sharing page excludes guests.
Reopen an investment report that is In review	Available to an organization admin or platform admin, not a plain member.

Because Email investors sends to every configured report recipient, verify the displayed recipient list and report period before confirming it. The page’s current authorization boundary is organization membership, not a separate admin-only check.

Periodic-report states

State	Meaning in the current UI
Draft	The report can be edited through Edit periodic report.
Closed	The report remains available for review but the draft-only edit route no longer opens it.
Cancelled	The report remains recorded but the draft-only edit route no longer opens it.

The report page renders a Change status… menu for the supported states. Status correction is intentionally excluded from the customer procedure at this product revision; contact support rather than using the menu. A report is unique by its subject, year, frequency, and period.

Investment-report states

State	Label
draft	Draft
shared	Shared
in_review	In review
published	Published

Investment reports can be edited collaboratively through approved live shared links. Link and collaborator management appears on Sharing; recorded changes appear on Change history.

Extraction states

Periodic-report and email extraction records use the same lifecycle:

• Pending — the record exists and extraction has not started; it normally awaits background processing;
• Processing — background extraction is running;
• Completed — extracted items are available for review;
• Failed — processing ended without a usable completed result.

Starting a periodic-report PDF extraction again creates a new extraction record after the Re-extract news items? confirmation. It does not silently replace the earlier record.

Organization and recipient safety

Initial report-page loads, email insights, and article searches scope records to the current organization. A raw record identifier is never evidence of authorization. Shared-link access is an explicit exception for the selected investment report and should be revoked when no longer needed.