Andrey Antukh ba8af3a1db 🐛 Prevent admins from granting owner role in team invitations ...

Add role-ceiling check to create-team-invitations and
update-team-invitation-role methods. These RPC methods allowed
team admins to grant or elevate invitations to :owner role,
bypassing the protection that exists in update-team-member-role.

The fix replicates the existing check from update-team-member-role:
reject promotion to :owner when the caller is not an owner.

Closes #11098

AI-assisted-by: qwen3.7-plus

2026-08-05 20:00:24 +00:00

..

app

🐛 Prevent admins from granting owner role in team invitations

2026-08-05 20:00:24 +00:00

data_readers.clj

🐛 Set correct name to tokens lib data reader

2025-10-13 18:41:02 +02:00