Name the organization that owns a subscription catalog row

Shipped: October 22, 2026 at 9:08 PM UTC
Author: Kamo
Commit: f8a952f

The catalog update/delete methods take a uid alone, so a caller holding the catalog right in any organization could edit another organization's plans, prices, add-ons and promotions - including the platform catalog every customer is billed from. catalogOwnerOrgId lets the controller check ownership first.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free Forever View Pricing