Skip to content

[codex] Restrict organization API key management to owners#2259

Merged
benjaminshafii merged 1 commit into
devfrom
codex/security-review-api-key-owner-access
Jun 14, 2026
Merged

[codex] Restrict organization API key management to owners#2259
benjaminshafii merged 1 commit into
devfrom
codex/security-review-api-key-owner-access

Conversation

@benjaminshafii

@benjaminshafii benjaminshafii commented Jun 14, 2026

Copy link
Copy Markdown
Member

Summary

  • Restrict organization API-key management to workspace owners only.
  • Update the API response descriptions and security operations docs to match the owner-only policy.
  • Add regression coverage for the API-key management access gate alongside the existing identity-configuration gate.

Validation

  • pnpm install --frozen-lockfile - passed.
  • pnpm --filter @openwork-ee/den-api build - passed.
  • bun test ee/apps/den-api/test/org-identity-access.test.ts - passed, 2 pass / 0 fail.
  • pnpm --dir ee/apps/den-api exec tsc -p tsconfig.json --noEmit - passed.
  • node -e "JSON.parse(require('fs').readFileSync('packages/docs/docs.json','utf8')); console.log('docs.json parse ok')" - passed.
  • git diff --check - passed.
  • bun test ee/apps/den-api/test - passed, 139 pass / 0 fail.
  • git diff --cached --check - passed before commit.

Live Smoke

Not applicable: this is a server-side authorization and documentation change with no UI/runtime boundary change.

Review in cubic

@vercel

vercel Bot commented Jun 14, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
openwork-app Ready Ready Preview, Comment Jun 14, 2026 1:02am
openwork-den Ready Ready Preview, Comment Jun 14, 2026 1:02am
openwork-den-worker-proxy Ready Ready Preview, Comment Jun 14, 2026 1:02am
openwork-landing Ready Ready Preview, Comment, Open in v0 Jun 14, 2026 1:02am

@mintlify

mintlify Bot commented Jun 14, 2026

Copy link
Copy Markdown
Contributor

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
differentai 🔴 Failed Jun 14, 2026, 1:06 AM

💡 Tip: Enable Workflows to automatically generate PRs for you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant