Community leaders able to search and read records created by other users from the same office.

[tiri39]

Bug description:
Community leaders able to search and read records created by other users from the same office.

community leaders should have these scopes -

• search[event=birth|death declared_by:me]
• record.read[event=birth|death declared_by:me]

Steps to reproduce:

1. Create an user under Klow village office, that can create records.
2. Create and notify a record.
3. Login as g.phiri (community leader at Klow village office)
4. Search for that record.

Actual result:
Community leaders able to search and read records created by other users from the same office.

Expected result:
According to the scopes, community leaders should be able to search and read only those records that are declared by themselves.

Recording:

Farajaland.CRS.-.Google.Chrome.2026-04-17.18-23-32.mp4

Tested on:
https://register.v20-test.e2e-k8s.opencrvs.dev/

Version:
v2.0

[cibelius]

Waiting for comment by @jpye-finch : https://opencrvsworkspace.slack.com/archives/C08PETJK4E6/p1776670867609329

[cibelius]

Testing notes: Community leader scopes were changed (see sheet). This most likely affects the testing workflows!