Skip to content

WOPC withdraw → reassign lets closing director be the WOPC's own payee (cross-issuance bug)

Goal (owner, 2026-06-15)

BUG on the Records page WOPC tab: after a user WITHDRAWS a WOPC signing-request email, they can re-select ANY available director as closing director — the picker ignores who the WOPC is FOR. The cross-issuance safeguard must hold: the closing director CANNOT be the person the WOPC was created for (a director can't sign off on their own WOPC/payment).

Notes

  • Same financial control as T-048 R3 (directors). The enforcement exists for creation via resolveRequiredClosingDirector(payeeAbbreviation) (lib/accounting/wopcPipeline.server.ts / matchPlugins/wopcInline.tsx), but the withdraw→reassign path on the Records WOPC tab (components/records/WopcSigningRequestModal.tsx director picker) does NOT apply it.
  • Fix: when the WOPC's payee IS a director, exclude that director from the picker options + validate server-side on (re)assign/send. Reuse the existing cross-issuance resolver; don't duplicate the rule.
  • Verify on both the withdraw→re-request flow and a normal request for a director-payee.

Log

  • 2026-06-15 created (owner). Backlog; unrelated to T-048 but same cross-issuance safeguard.