Alias visibility filtering + auto-verify subdomain ownership

FeatureSecurityService
Shipped
April 24, 2026 at 3:06 AM UTC
Author
Kamo
Commit
b6c8d4b

OrganizationController: - Web-alias org creation now auto-marks ownershipVerified=true and isDnsVerified=true on the created OrgDomain — no TXT record needed since we provisioned DNS on GoDaddy on their behalf - CUSTOM parentAliasType path now enforces per-alias creator-type visibility (mirrors /creatable filter so the backend can't be bypassed) BranchTypeController /creatable: - parentAliases list is now filtered by the caller's creatorType: MEMBERS see only visibleToMembers=true aliases, TEAM_MEMBERS see only visibleToTeamMembers=true aliases, OWNERS see all - Each alias DTO now includes visibleToMembers + visibleToTeamMembers flags SecurityModelController: - processSubdomainBranchConfig now reads **************** from alias map objects and calls replaceAllFull to persist them

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing