fix(org): hide limited organizations from restricted users (#39047)

Do not expose limited organization memberships to restricted viewers.

---------

Co-authored-by: silverwind <me@silverwind.io>
This commit is contained in:
bircni
2026-08-23 08:11:04 +02:00
committed by GitHub
parent d8f0e7e679
commit bedd2afb47
3 changed files with 15 additions and 3 deletions
+3
View File
@@ -77,6 +77,9 @@ func TestUserOrgs(t *testing.T) {
orgs = getUserOrgs(t, unrelatedUsername, privateMemberUsername)
assert.Empty(t, orgs)
orgs = getUserOrgs(t, "user29", adminUsername)
assert.Empty(t, orgs)
// not authenticated call should not be allowed
testUserOrgsUnauthenticated(t, privateMemberUsername)
}