[Contractors] Normalize payee emails and downcase existing ones

app/models/payee.rb

@@ -38,6 +38,8 @@ class Payee < ApplicationRecord
 
   validate :managed_legal_entity_constraints
 
+  normalizes :email, with: ->(email) { email.strip.downcase }
+
   scope :not_archived, -> { where(archived_at: nil) }
 
   pg_search_scope :search, against: [:display_name, :email], using: { tsearch: { prefix: true, dictionary: "english" } }

app/policies/payroll/position_policy.rb

@@ -52,7 +52,10 @@ def review?
     end
 
     def onboarding?
-      user&.auditor? || record.payee.legal_entity&.users&.include?(user) || user&.email == record.payee.email
+      return true if user&.auditor?
+      return true if record.payee.legal_entity&.users&.include?(user)
+
+      user&.email.present? && user.email.casecmp?(record.payee.email.to_s)
     end
 
     private

db/migrate/20260805120000_downcase_payee_emails.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class DowncasePayeeEmails < ActiveRecord::Migration[8.1]
+  disable_ddl_transaction!
+
+  def up
+    Payee.where("email <> lower(btrim(email))").in_batches(of: 1_000) do |batch|
+      batch.update_all("email = lower(btrim(email))")
+    end
+  end
+
+  def down
+    # irreversible
+  end
+
+end

db/schema.rb

@@ -12,7 +12,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[8.1].define(version: 2026_08_04_120000) do
+ActiveRecord::Schema[8.1].define(version: 2026_08_05_120000) do
   # These are extensions that must be enabled in order to support this database
   enable_extension "citext"
   enable_extension "pg_catalog.plpgsql"