- Shipped
- September 23, 2026 at 1:00 PM UTC
- Author
- Kamo
- Commit
- 383d17f
Department and job title already needed MANAGE_MEMBER_SECURITY (or an open god window) on /member-security, your own record included. The rest of the Position card was still open: - PUT /member-security/{id} let a member change their own official title. - PUT /members/{id} let ANY member of the organization change anyone's official title, membership status and work location. A member could retitle a colleague or move them to TERMINATED (which fires the off-boarding path). One who was SUSPENDED but still held a live session could set themselves back to ACTIVE. Now the official title and the membership status need MANAGE_MEMBER_SECURITY on every record, your own included. The work location stays yours, or a security administrator's, and the manager is unchanged. Each check compares values, reading them exactly as the write does (PositionFields), so an unchanged field sent alongside another edit is not refused. MANAGE_MEMBERS alone is not enough, and neither is god eligibility without an open window. The official title is now stored trimmed and cut to the column's 60 characters on both endpoints. /members used to store it raw, and a longer value failed at the database.