rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
2ffeb7f3e873901791b6b6f9d864fa6760592850
probo/e2e/console
History
Sacha Al Himdani 2ffeb7f3e8 Require set-owner authorization to create OWNER membership 
An organization ADMIN could mint an OWNER membership via createUser, which
only gated iam:membership-profile:create and bypassed the owner-only
iam:membership-role:set-owner check that updateMembership already enforces.

Gate the requested role in both createUser entry points (connect resolver
and the MCP CreateUserTool) with an additional set-owner authorization when
the role is OWNER, mirroring updateMembership. Add a regression test that
locks the ADMIN/OWNER privilege boundary the fix relies on.

Signed-off-by: Sacha Al Himdani <sacha@probo.com>
2026-07-03 17:37:26 +02:00
..
access_review_test.go
Fix access review test whitespace
2026-06-30 14:11:10 +02:00
agent_run_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
asset_publish_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
asset_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
audit_log_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
audit_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
common_third_party_test.go
Seed enrichment_attempts in common third party e2e
2026-06-12 14:39:52 +02:00
compliance_framework_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
connect_organization_logo_test.go
Migrate Connect org logos to File type
2026-06-11 13:55:44 +02:00
connector_test.go
Style
2026-06-09 17:19:46 +02:00
control_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
cookie_banner_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
cookie_banner_tracker_policy_test.go
Use probo.com for bare and marketing domain references
2026-06-11 13:46:10 +02:00
cookie_banner_versioning_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
cookie_category_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
datum_publish_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
datum_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
document_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
document_version_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
dpia_publish_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
employee_document_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
finding_publish_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
finding_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
framework_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
inviting_organizations_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
main_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
mapping_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
measure_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
oauth2_access_token_test.go
Add identity-scoped OAuth token management
2026-06-18 20:08:49 +02:00
oauth2_prb_cli_test.go
Fix e2e tests following oauth2 scopes
2026-06-23 19:17:56 +02:00
oauth2_scope_test.go
Add OAuth2 API scope registration and enforcement
2026-06-18 19:07:25 +02:00
oauth2_test.go
Fix advertised scopes for oauth protected resources
2026-06-25 10:23:30 +02:00
obligation_publish_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
obligation_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
organization_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
processing_activity_publish_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
processing_activity_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
rbac_test.go
Introduce access-review source snapshot and normalize naming
2026-06-15 15:33:22 +02:00
resource_alias_test.go
Cover resource aliases in end-to-end tests
2026-06-22 11:40:17 +02:00
rights_request_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
risk_assessment_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
risk_publish_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
risk_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
scim_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
security_read_gap_owners_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
security_read_gap_test.go
Style
2026-07-03 11:53:57 +02:00
security_write_gap_test.go
Style
2026-07-03 11:53:57 +02:00
statement_of_applicability_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
task_assignment_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
task_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
third_party_compliance_report_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
third_party_contact_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
third_party_import_test.go
Add importThirdPartyFromCommon GraphQL mutation
2026-06-11 12:08:22 +02:00
third_party_publish_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
third_party_relation_test.go
Scope sub-third-parties per parent
2026-06-10 14:15:01 +02:00
third_party_service_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
third_party_test.go
Add e2e tests
2026-07-03 10:13:00 +02:00
tia_publish_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
tracker_pattern_test.go
Seed attribution in common tracker pattern helper
2026-06-18 17:23:37 +02:00
tracker_resource_test.go
Update contact email to hello@probo.com
2026-06-09 16:45:23 +02:00
trust_center_nda_test.go
Switch console file fields to File download URLs
2026-06-11 10:47:28 +02:00
user_test.go
Require set-owner authorization to create OWNER membership
2026-07-03 17:37:26 +02:00