raystack / frontier / 25898724438

42%

main: 42%

Build Type

Pull #1615

github

Committed by whoAbhishekSah

Commit Message

fix(group): clean up group-as-principal policies on delete

OnGroupDeleted previously only deleted policies where the group was the
*resource* (memberships into the group). Policies where the group is
the *principal* on some other resource — e.g. CreatePolicy granting a
group access to a project — were leaked when the group was destroyed,
leaving orphaned bindings.

Adds removeGroupAsPrincipalPolicies which queries policies by principal
and deletes them, called from OnGroupDeleted alongside the existing
member + hierarchy cleanup.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Pull Request Pull Request #1615: refactor(group): move group-delete cleanup into membership package

Coverage Stats

47 of 68 new or added lines in 5 files covered. (69.12%)

47 existing lines in 2 files now uncovered.

15999 of 37697 relevant lines covered (42.44%)

11.89 hits per line