- Shipped
- October 4, 2026 at 9:04 PM UTC
- Author
- Kamo
- Commit
- 2f42cec
titlePhonetic and titleShortPhonetic ride PUT /api/security/org/{id} under the same rights as title/titleShort (ownership or CONFIGURE_SYSTEM, never god-mode only). Each is capped at 255 characters, refused with 400 {error, field} before anything is stored, as the member's namePhonetic is. GET /{id} already returns the entity whole, so both appear there with no change. **************** runs the real OrganizationService over one stored row: owner sets both, a caller without the right gets today's 403, 256 characters on either is 400 naming the field, 255 is stored, a PUT naming one leaves the other, null clears, and the GET carries both (null until set).