Repository navigation

security(users): stop /users/:id writes and login from crossing the tenant boundary (#807) - #832

Merged

alex-dembele merged 5 commits into

security/807-users-global-account-writes

Oct 1, 2026

Commits on Sep 29, 2026

fix(users): remove the /users/:id writes that act on the global account (#807)
alex-dembele
committed
af41d4b
fix(auth): sign in to another organization when the default one withdrew access (#807)
alex-dembele
committed
0a6e261
test(users): prove a membership change in one tenant leaves the others alone (#807)
alex-dembele
committed
034ea49
chore(settings): remove the dead useUsers hook and AdminUser type (#807)
alex-dembele
committed
504ee0d
test(security): drop the isolation decision for the removed /users/{id} routes (#807)
alex-dembele
committed
5f5e107