raystack / frontier / 24874344299

42%

main: 43%

Build Type

Pull #1570

github

Committed by whoAbhishekSah

Commit Message

fix: reject RemoveOrganizationMember for service user principals

Service users are bound to a single org — removing org membership
without deleting the SU creates a zombie state (token works, all
RPCs return 403). Reject at the handler with a clear message directing
callers to use DeleteServiceUser instead.

The service layer still accepts service users (used internally by
DeleteServiceUser for cascade cleanup).

Ref: https://github.com/raystack/frontier/issues/1571

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Pull Request Pull Request #1570: feat: migrate serviceuser Create/Delete to use membership package

Coverage Stats

8 of 54 new or added lines in 5 files covered. (14.81%)

58 existing lines in 1 file now uncovered.

15699 of 37059 relevant lines covered (42.36%)

11.76 hits per line