Freegle / iznik-server-go / 151a6693-b810-4538-9a8d-4b48e30a74ac

77%

master: 89%

Pull #58

circleci

fix(user): allow moderators to merge members they administer (V1 parity)

V1 permits merge when caller is admin/support OR moderates both target
users. The Go implementation only allowed admin/support. Now:
- Early gate: caller must be at least a mod of some group (prevents
  regular users probing email existence via email1/email2 resolution)
- After ID resolution: admin/support always permitted; mods must
  IsModOfUser for both id1 and id2

Tests added: moderator-merges-both-users (200) and
moderator-cannot-merge-outside-user (403).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

21 of 29 new or added lines in 1 file covered. (72.41%)

19584 of 25578 relevant lines covered (76.57%)

23.35 hits per line