KamoCRM

Allow elevated access on getDomainById and verify-dns endpoints

FixSecurityService
Ya
29 Aprili 2026, 01:35 UTC
Mwandishi
Kamo
Ahadi ya
fe14c5f

Top-level org owners and system members were getting 403 on getDomainById and verify-dns because those endpoints checked isUserMemberOfOrg directly. Adds hasElevatedCrossOrgAccess helper and applies it alongside the member check.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila kitu kinaingia kwenye tovuti yako mwenyewe. Anza kwenye mpango wa bure na usome ukurasa huu tena katika mwezi mmoja.

Kuwa Huru MileleMtazamo wa bei