KamoCRM

Allow elevated access on getDomainById and verify-dns endpoints

FixSecurityService
Shipped
29 ஏப்ரல், 2026 அன்று 1:35 AM UTC
Author
Kamo
Commit
fe14c5f

Top-level org owners and system members were getting 403 on getDomainById and verify-dns because those endpoints checked isUserMemberOfOrg directly. Adds hasElevatedCrossOrgAccess helper and applies it alongside the member check.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing