2cc43c3c44
All checks were successful
CI / Unit & Component Tests (push) Successful in 3m17s
CI / OCR Service Tests (push) Successful in 20s
CI / Backend Unit Tests (push) Successful in 3m26s
CI / fail2ban Regex (push) Successful in 44s
CI / Semgrep Security Scan (push) Successful in 20s
CI / Compose Bucket Idempotency (push) Successful in 1m2s
The OCR status check is now gated behind canWrite (readers do no write-path work), so the two OCR-status page tests must render as a writer — OCR is a writer action. Without canWrite the status check never fires and the "OCR läuft" spinner never mounts. Fixes the CI regression introduced by confining read-only users to the read view. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>