32133795236
89%
staging: 89%

Ran 18 Aug 2026 11:55AM UTC

Jobs 0

Files 0

Run time –

Badge

Embed ▾

pending completion

cancel

Build # 32133795236

Build Type

push

github

Committed by

DenSmolonski

Commit Message

fix: restrict space invites to admins of that space

The authorization check in `inviteUsers` looked up an ACTIVE/ADMIN member
row for the signer without constraining it to the target space, so an
admin of any one space could invite arbitrary members — including with
the ADMIN role — into any other space.

Replace the inline query with a dedicated `assertActiveSpaceAdmin` guard
that verifies admin rights within the given space, mirroring the scoping
already applied by `updateRole`, `removeUser` and the other member
operations. Error semantics are unchanged.

Add an integration test covering the repository layer and an e2e test
asserting the endpoint answers 401 when the signer administers a
different space.

Coverage Stats

Source Files on build 32133795236

Detailed source file information is not available for this build.

protofire / safe-client-gateway / 32133795236
89%
staging: 89%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on build 32133795236

protofire / safe-client-gateway / 32133795236 89% staging: 89%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on build 32133795236

protofire / safe-client-gateway / 32133795236
89%
staging: 89%

README BADGES
x