fix: prevent unauthorised access from group permissions - #5893

Merged

matthewelwell merged 11 commits into

mainfrom

origin/fix/prevent-unauthorised-access-from-group-permissions-v2

Aug 20, 2025

Commits on Aug 5, 2025

Add failing tests to validate permissions issue
matthewelwell
committed
9a8f9dc
Fix get_permitted_<entities>_for_user functions
matthewelwell
committed
46c9aeb
Add test for user_has_organisation_permission
matthewelwell
committed
7453b77
Fix user_has_organisation_permission
matthewelwell
committed
a56c7a7
Add tests for is_user_<entity>_admin
matthewelwell
committed
f4853b4
Fix is_user_<entity>_admin
matthewelwell
committed
600d033
Add migration to remove orphan group memberships
matthewelwell
committed
69580c2
Fix tests + bonus typing fix
matthewelwell
committed
2b703d8
Fix tests post rebase
matthewelwell
committed
272f79c
Fix webhook test
matthewelwell
committed
15ba0ce
Add pragma no cover
matthewelwell
committed
8511f20