Add migration to fix wrong GIDs

Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-19 18:34:11 +04:00
parent 8559a11be5
commit acdbc79a8f
3 changed files with 14 additions and 2 deletions
--- a/pkg/iam/iam_policies.go
+++ b/pkg/iam/iam_policies.go
@@ -135,7 +135,10 @@ var IAMOwnerPolicy = policy.NewPolicy(
 		ActionMembershipDelete,
 	).
 		WithSID("membership-deletion-owner-access").
-		When(policy.NotEquals("resource.source", "SCIM")),
+		When(
+			policy.Equals("principal.organization_id", "resource.organization_id"),
+			policy.NotEquals("resource.source", "SCIM"),
+		),

 	// Can set other members OWNER
 	policy.Allow(ActionMembershipRoleSetOwner).