Add /me/language endpoint that bypasses SystemUserGuard

FixSecurityService
Ya
12 Mei 2026, 07:02 UTC
Mwandishi
Kamo
Ahadi ya
29dd32c

The NavTop language picker did nothing for the System User signed into a sub-org: PUT **************** runs SystemUserGuard first, which 403s every System-User TeamMember mutation (provisioned in every org by SystemUserBackfillService). The frontend's silent catch swallowed the 403, so the locale cookie never updated. Mirror the /me/availability pattern: resolve the member from the session and skip the guard. Caller can only ever mutate their own language, so the guard's "tenants must not touch System User memberships" intent is preserved.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei