kobotoolbox / kpi / 12142288574 / 1

80%

master: 76%

push

github

Restrict email updates to organization owners and admins only (#5317)

### 📣 Summary
Restrict email updates to organization owners and admins only to ensure
proper access control within multi-member organizations.



### 📖 Description
Previously, any member of an organization could update their email
address, regardless of their role. This update enforces a restriction
where only organization owners and admins can update their email
addresses. Members without these roles are now prevented from making
such changes.



### 👷 Description for instance maintainers
This update introduces a new restriction to the email update endpoint.
It checks the role of the user within the organization and ensures that
only users with the `owner` or `admin` role in organizations can update
their email. This ensures better security and role-based access control.
No changes are required for single-member organizations.

5727 of 9207 branches covered (62.2%)

21857 of 27220 relevant lines covered (80.3%)

0.8 hits per line