raystack / frontier / 26817178922

43%

main: 43%

Build Type

Pull #1665

github

Committed by AmanGIT07

Commit Message

chore(membership): address review on PAT principal support

- SetOrganizationMemberRole skips ErrNotMember for PAT so it acts as an
  upsert (PAT may not have a prior org policy).
- Gate validateMinOwnerConstraint to UserPrincipal in both
  SetOrganizationMemberRole and RemoveOrganizationMember — only humans
  can be the last owner.
- validateOrgMembership PAT branch returns ErrInvalidPrincipal (matching
  validatePrincipal) when userPATService is not wired.
- ListPrincipalsByResource filters out pat_granted policies for org
  listings via new excludePATAllProjects helper — that grant lives on
  the org but means project access, not org membership.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Pull Request Pull Request #1665: feat(membership): accept PAT principals; add SetPATAllProjectsRole

Coverage Stats

93 of 124 new or added lines in 2 files covered. (75.0%)

181 existing lines in 1 file now uncovered.

16402 of 38004 relevant lines covered (43.16%)

12.09 hits per line