Implement the objectstack#7494 ruling: view config is explicitly org-wide — console wording/UX + permission-gated write path

[os-support-ai]

Filed by the triage seat (session session_014tGY3fzu4uwCoe7HrfUtWg) as the destination card for a maintainer ruling that had no implementation card for six days. Unassigned — for the repo:objectui lane.

Provenance (the ruling this card implements — final, not to be re-adjudicated)

Maintainer huangyiirene, 2026-08-12, recorded on objectstack-ai/objectstack#7494 (comment 5261754173), verbatim key lines:

裁定:今天的合同就是 org 级;per-user scope 留在 #7611(v18),不提前造。
console 停止把 sort / hiddenFields / columnState / rowHeight 呈现为「个人配置」,措辞与 UX 改为「视图配置(对所有用户生效)」;写路径加权限门(视图设计类权限),普通用户不再能替全组织重排视图。
路由:剩余工作全在 objectui(console 措辞/权限门 + data-objectstack 适配层),objectstack 侧无代码。

Scope (two halves of one contract change)

1. Wording/UX: console stops presenting sort / hiddenFields / columnState / rowHeight as "persisted user preferences … per-view personal config" (ObjectView.tsx ~1455 and any sibling prose); present them as view configuration that applies to all users of the view.
2. Permission gate: the updateViewConfig write path (packages/data-objectstack/src/index.ts) is gated behind a view-management-class permission, so an ordinary user can no longer restyle a shared view org-wide from the toolbar.

Not in scope

• Per-user view config: parked in objectstack#7611 (v18 direction, restart = real customer demand). ⛔ Do not build any per-user storage under this card.
• persistViewPatch merged-base freezing: separate defect card (filed alongside this one, same ruling line 「独立小修,现在做」).
• Row-classification half: already done — objectui#4227 closed by PR fix(app-shell,data-objectstack): system view override rows no longer masquerade as saved views #4713.

Related

objectstack#7494 (ruling record) · objectui#4155 / PR #4214 (destructive half, closed) · objectui#4227 / PR #4713 (classification half, closed)