fix(authz): close DeleteMembership authorization bypass#3245

Merged

matiasinsaurralde merged 2 commits into

mainfrom

fix/delete-membership-authz-bypass

Jun 26, 2026

Commits on Jun 26, 2026

fix(authz): enforce admin policy on org membership delete/update
matiasinsaurralde
committed
test(authz): add viewer-denied middleware test for UpdateMembership
matiasinsaurralde
committed