fix: keep existing privileges when User.Added is processed late (#331)

client.go

@@ -123,12 +123,17 @@ func (h *PrivilegeHandler) Process(msg any) error {
 
 	switch ev := msg.(type) {
 	case *UserAdded:
-		if priv, exists := h.privileges[ev.Email]; exists {
+		// Keep the privileges already recorded for the company. Each routing key has
+		// its own transient queue, so a Privilege.Added published after this event can
+		// be processed before it; overwriting the entry here would drop that privilege
+		// until the next Fetch, which only runs at start.
+		priv, exists := h.privileges[ev.Email]
+		if !exists {
+			priv = map[string]*CompanyPrivileges{}
+			h.privileges[ev.Email] = priv
+		}
+		if _, exists := priv[ev.CompanyID]; !exists {
 			priv[ev.CompanyID] = &CompanyPrivileges{}
-		} else {
-			h.privileges[ev.Email] = map[string]*CompanyPrivileges{
-				ev.CompanyID: {},
-			}
 		}
 		return nil
 	case *UserRemoved: