kobotoolbox / kpi / 23247749127 / 7

82%

master: 76%

push

github

fix(permissions): org admins can see and manage all asset permissions DEV-1884 (#6836)

### 📣 Summary

Organization admins were unable to see other users' permission
assignments on projects belonging to their organization.

### 📖 Description

Organization admins receive `manage_asset` implicitly through their org
role — no `ObjectPermission` record is created in the database. The
permission visibility logic for both the asset detail endpoint and the
organization assets list relied solely on explicit DB records to
determine whether the requesting user could see all assignments. As a
result, org admins were silently treated as regular users and could only
see the owner's and their own permissions, making it impossible to
manage sharing from the project detail page.

4478 of 11426 branches covered (39.19%)

21040 of 34748 relevant lines covered (60.55%)

0.61 hits per line