KamoCRM

Add /me/language endpoint that bypasses SystemUserGuard

FixSecurityService
Shipped
12 மே, 2026 அன்று 7:02 AM UTC
Author
Kamo
Commit
29dd32c

The NavTop language picker did nothing for the System User signed into a sub-org: PUT **************** runs SystemUserGuard first, which 403s every System-User TeamMember mutation (provisioned in every org by SystemUserBackfillService). The frontend's silent catch swallowed the 403, so the locale cookie never updated. Mirror the /me/availability pattern: resolve the member from the session and skip the guard. Caller can only ever mutate their own language, so the guard's "tenants must not touch System User memberships" intent is preserved.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing