8000 chore: prevent removing members from the default organization by Emyrk · Pull Request #14094 · coder/coder · GitHub
[go: up one dir, main page]
Skip to content

chore: prevent removing members from the default organization #14094

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 6 commits into from
Aug 5, 2024
Merged

chore: prevent removing members from the default organization #14094

Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
d3fb463
chore: prevent removing members from the default organization
Emyrk Aug 1, 2024
15e7ca2
chore: fixup test that it now requires enterprise
Emyrk Aug 1, 2024
b3f6c78
fmt
Emyrk Aug 1, 2024
fb5a6cd
move test to enterprise
Emyrk Aug 2, 2024
419cb44
make fmt
Emyrk Aug 2, 2024
476ed7d
add unit test to verify not deleting org member from default org
Emyrk Aug 5, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
chore: prevent removing members from the default organization 
Until multi-organizations is released outside an experiment, the
experiment should be backwards compatible.
  • Loading branch information
@Emyrk
Emyrk committed Aug 1, 2024
commit d3fb4630d1745ede755cd8a9fc113895111e2ed0
13 changes: 13 additions & 0 deletions coderd/members.go
View file
Open in desktop
BE89
Original file line number Diff line number Diff line change
Expand Up @@ -106,6 +106,19 @@ func (api *API) deleteOrganizationMember(rw http.ResponseWriter, r *http.Request
aReq.Old = member.OrganizationMember.Auditable(member.Username)
defer commitAudit()

if organization.IsDefault {
// Multi-organizations is currently an experiment, which means it is feasible
// for a deployment to enable, then disable this. To maintain backwards
// compatibility, this safety is necessary.
// TODO: Remove this check when multi-organizations is fully supported.
httpapi.Write(ctx, rw, http.StatusBadRequest, codersdk.Response{
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ideally I'd like to have a test confirm this path behavior

Message: "Removing members from the default organization is not supported.",
Detail: "Multi-organizations is currently an experiment, and until it is fully supported, the default org should be protected.",
Validations: nil,
})
return
}

if member.UserID == apiKey.UserID {
httpapi.Write(ctx, rw, http.StatusBadRequest, codersdk.Response{Message: "cannot remove self from an organization"})
return
Expand Down
Loading
0