[Orgs] Multi-tenant organizations with a project role ladder (owner/manager/editor/viewer) - #267

Open

amal66 wants to merge 23 commits into

open-legal-products:mainfrom

amal66:olp-pr/organizations-rbac

Commits on Aug 25, 2026

feat: multi-tenant organizations with owner/admin/member roles

amal66
and
claude
committed
aba7454
feat: project role ladder + capability matrix over the org access branches

amal66
and
claude
committed
745504f
fix(chat): require content.edit to write to an existing chat

amal66
and
claude
committed
4fde30a
fix(orgs): forbid admins from demoting or removing an org owner

amal66
and
claude
committed
fa6f1ce
fix(orgs): resolve member emails via the indexed profile lookup

amal66
and
claude
committed
be846ba
fix(sql): apply org visibility to the paginated reviews overview the API actually calls

amal66
and
claude
committed
4ce7b76
fix(sql): mirror org visibility into the bulk select-all ids RPC

amal66
and
claude
committed
290a1a2
test(tabular): send row_ids to clear-cells after the logical-rows refactor

amal66
and
claude
committed
351162b
fix(sql): port org visibility onto the second-generation list read-models

amal66
and
claude
committed
156efcb
fix(access): stop the org viewer branch from shadowing a project share on docs and reviews

amal66
and
claude
committed
672f0e3
fix(projects): directory search 500s for every caller — jsonb containment used PgArray syntax

amal66
and
claude
committed
e5a9198
fix(sql): give the filter-options RPCs the same org visibility as the lists they filter

amal66
and
claude
committed
b1c283a
fix(access): merge overlapping access branches strongest-wins so a grant can never demote

amal66
and
claude
committed
d32614d
fix(audit): shared-project events silently vanished — the last jsonb containment misuses

amal66
and
claude
committed
af7b676
fix(orgs): personal orgs are structurally single-user

amal66
and
claude
committed
8732beb
fix(orgs): a database trigger closes the last-owner race for good

amal66
and
claude
committed
7e48a31
fix(orgs): membership departures vacate team seats; constraint races map to 409

amal66
and
claude
committed
6787302
fix(access): lazily re-provision a missing personal org

amal66
and
claude
committed
68f8279
fix(orgs): stop the member-add routes from leaking which emails have accounts

amal66
and
claude
committed
02ec88a
fix(sql): normalize legacy review-share emails so lists agree with detail access

amal66
and
claude
committed
833ad67
fix(sql): align function-body comments so the drift fingerprint converges

amal66
and
claude
committed
e0326f8
fix(access): give container.delete the call sites its ladder row promises

amal66
and
claude
committed
dd0aef8
docs(sql): point the org migrations' cross-references at their post-rebase names

amal66
and
claude
committed
1e0f147

Navigation Menu

Uh oh!

[Orgs] Multi-tenant organizations with a project role ladder (owner/manager/editor/viewer) - #267

[Orgs] Multi-tenant organizations with a project role ladder (owner/manager/editor/viewer)#267
amal66 wants to merge 23 commits into
open-legal-products:mainfrom
amal66:olp-pr/organizations-rbac

Commits on Aug 25, 2026

feat: multi-tenant organizations with owner/admin/member roles

feat: project role ladder + capability matrix over the org access branches

fix(chat): require content.edit to write to an existing chat

fix(orgs): forbid admins from demoting or removing an org owner

fix(orgs): resolve member emails via the indexed profile lookup

fix(sql): apply org visibility to the paginated reviews overview the API actually calls

fix(sql): mirror org visibility into the bulk select-all ids RPC

test(tabular): send row_ids to clear-cells after the logical-rows refactor

fix(sql): port org visibility onto the second-generation list read-models

fix(access): stop the org viewer branch from shadowing a project share on docs and reviews

fix(projects): directory search 500s for every caller — jsonb containment used PgArray syntax

fix(sql): give the filter-options RPCs the same org visibility as the lists they filter

fix(access): merge overlapping access branches strongest-wins so a grant can never demote

fix(audit): shared-project events silently vanished — the last jsonb containment misuses

fix(orgs): personal orgs are structurally single-user

fix(orgs): a database trigger closes the last-owner race for good

fix(orgs): membership departures vacate team seats; constraint races map to 409

fix(access): lazily re-provision a missing personal org

fix(orgs): stop the member-add routes from leaking which emails have accounts

fix(sql): normalize legacy review-share emails so lists agree with detail access

fix(sql): align function-body comments so the drift fingerprint converges

fix(access): give container.delete the call sites its ladder row promises

docs(sql): point the org migrations' cross-references at their post-rebase names