- Shipped
- October 18, 2026 at 6:49 PM UTC
- Author
- Kamo
- Commit
- 85e7f89
BillingService authorized 'own account or organization owner' and never consulted a right, so the owner could not hand billing to an administrator or an SI. AccountOrgScopeInterceptor now also lets a member of the account's organization through with MANAGE_ORG_BILLING (any request) or VIEW_ORG_BILLING (reads). Both are seeded to nobody, so nobody gains or loses anything until the owner grants them; the cross-organization and sub-resource checks are unchanged, and a rights lookup that fails closes. GET /api/billing/accounts listed every account in the organization to any member, although Plans & Billing shows only isSelf || isOrganizationOwner; it now returns all of them to the owner or a holder of either right, and otherwise only the caller's own.