Load Allowed Apps from an endpoint tenants can actually read

Shipped

August 9, 2026 at 1:47 AM UTC

Author

kamo

Commit

651eee9

appCatalogApi.list() is platform-owner-only, so on any tenant org the Branch Types editor showed no apps and the save guard — which exists to stop an empty catalog silently stripping every child org's grants — then blocked saving the model at all. listForOrg() reads the CONFIGURE_SYSTEM-gated projection instead, which is the right the page already requires. The save guard stays: it is correct, it was just permanently tripped.