Elgato_dark/console
1
0
Fork 0
mirror of https://github.com/graphql-hive/console synced 2026-04-21 14:37:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fix: legacy member role mapping for settings should not include delete project (#7866)

Browse source
This commit is contained in:
Laurin 2026-03-18 11:04:51 +01:00 committed by GitHub
parent 9c0d95e825
commit 66a4f6bef8
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
.changeset/fresh-rockets-spend.md Normal file
View file

@ -0,0 +1,5 @@
---
'hive': patch
---
Fix legacy member scope mappings granting access to deleting projects.

1
packages/services/api/src/modules/organization/providers/organization-member-roles.ts
View file

@ -368,7 +368,6 @@ function transformOrganizationMemberLegacyScopesIntoPermissionGroup(
break;
}
case ProjectAccessScope.SETTINGS: {
permissions.add('project:delete');
permissions.add('project:modifySettings');
permissions.add('schemaLinting:modifyProjectRules');
break;