History

Move product access rules out of the SDK

Rhys Sullivan committed 1 month ago

Commit c676e561 parent a72e51d161 files · +3935 −867Browse files

Showing the changes to apps/cloud/src/admin (1 of 161 files). Show all

Unified · Split

apps/cloud/src/admin/admin-users-api.ts+1−1
@@ -17,7 +17,7 @@ · 16 unmodified lines
1717 // acting member, and this plane deliberately serves the whole tenant.
1818 //
1919 // The executor is built by `makePlatformExecutor` — `{ tenant, subject:
20−// undefined, platformView: true }` — so the reads are tenant-wide and read-only
20+// undefined, access: platformObserverAccess() }` — so the reads are tenant-wide and read-only
2121 // by storage policy, and no `subject` row is minted for the caller.
2222 //
2323 // Cross-tenant isolation is structural, not a check in this file: the tenant is