User profile controls that hide non-sales features from users outside sales

tests/workloadActions.test.cjs

@@ -53,6 +53,7 @@ test("workload actions reject missing credentials, invalid ids, HTTP/network/JSO
 
 function contentFixture(send) {
   const app = loadApplication("content", { document: { createElement: () => ({ attributes: {}, setAttribute(k, v) { this.attributes[k] = v; } }) } });
+  app.currentUser.allowsCrmActivities = () => true;
   app.authContentSession.requestConsumerTokenServiceOnce = async () => ({ workloadActions: { value: "synthetic-wwb" } });
   app.authSessionState.principal = "test@example.invalid";
   app.platformContentMessages.sendRuntimeMessage = send;
@@ -165,6 +166,7 @@ test("product progress triggers Actions for cached products and ignores stale pr
     window: { requestAnimationFrame() {} },
     chrome: { runtime: { onMessage: { addListener(fn) { listener = fn; } } } }
   });
+  app.currentUser.allowsCrmActivities = () => true;
   app.authContentSession.requestConsumerTokenServiceOnce = async () => ({ workloadActions: { value: "synthetic" } });
   app.platformContentMessages.sendRuntimeMessage = async message => {
     calls.push(message);