The admin assistant's customer booking lookup now respects appointment permissions properly.
- Asking which sessions a named customer holds a place or waiting-list spot on now returns class sessions only for staff who are not allowed to view appointments.
- Previously the answer could reveal that the customer was booked into a one-to-one appointment session, even though the client's name is normally hidden from those staff.
- Account admins and staff with permission to view appointments continue to see appointment sessions in these answers exactly as before.
