Gate Roll Call behind the opt-in business module.

Super Admin can enable it per business; nav and pages stay hidden when off.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/customer/src/components/Sidebar.tsx

@@ -32,7 +32,7 @@ export function Sidebar({ open = false }: SidebarProps) {
   const displayName = brandName || fallbackBusinessName
   const showMyProducts = hasBusinessModule(enabledModules, 'customer_products')
   const activeBusinessId = getActiveBusinessId()
-  const showRollCall = canAccessRollCall(user, activeBusinessId)
+  const showRollCall = canAccessRollCall(user, activeBusinessId, enabledModules)
 
   const navItems = [
     { icon: Home, label: t('nav.home'), to: '/' },

apps/customer/src/pages/RollCallPage.tsx

@@ -27,6 +27,7 @@ import {
   type RollCallSummary,
   type RollCallsListResponse,
 } from '../services/rollCallService'
+import { useTenantBranding } from '../context/TenantBrandingContext'
 import { canAccessRollCall } from '../utils/rollCallAccess'
 import pageStyles from '../components/PageContent.module.css'
 import styles from './RollCallPage.module.css'
@@ -101,8 +102,9 @@ export function RollCallPage() {
   const { locale } = useLocale()
   const { showToast } = useToast()
   const { user } = useAuth()
+  const { enabledModules } = useTenantBranding()
   const activeBusinessId = getActiveBusinessId()
-  const allowed = canAccessRollCall(user, activeBusinessId)
+  const allowed = canAccessRollCall(user, activeBusinessId, enabledModules)
 
   const [data, setData] = useState<RollCallsListResponse | null>(null)
   const [loading, setLoading] = useState(false)

apps/customer/src/utils/businessModules.ts

@@ -11,6 +11,7 @@ export const BUSINESS_MODULE_IDS = [
   'blog',
   'warehouse',
   'videos',
+  'roll_call',
   ...CUSTOMER_MODULE_IDS,
 ] as const
 

apps/customer/src/utils/rollCallAccess.ts

@@ -1,4 +1,8 @@
 import type { AuthUser } from '../types/auth'
+import {
+  hasBusinessModule,
+  type BusinessModuleId,
+} from './businessModules'
 
 function membershipAllowsRollCall(membership: {
   isOwner: boolean
@@ -19,14 +23,15 @@ function sameId(a: string | number | null | undefined, b: string | number | null
 }
 
 /**
- * Show Roll Call in the customer dashboard when the user is staff
- * (owner / admin) for the active tenant — same people who can open
- * the business dashboard. No business module toggle is required.
+ * Show Roll Call when the business module is enabled and the user is
+ * staff (owner / admin) for the active tenant.
  */
 export function canAccessRollCall(
   user: AuthUser | null | undefined,
   activeBusinessId: string | null,
+  enabledModules?: readonly BusinessModuleId[] | null,
 ): boolean {
+  if (!hasBusinessModule(enabledModules, 'roll_call')) return false
   if (!user) return false
 
   if (user.isSuperAdmin || user.roles.includes('super_admin')) {