Admin can remove themselves from the organization
I maintainer di solito rispondono entro 1 giorno
Nessuno ha ancora preso questa issue.
Valutazione
- Difficoltà
- 4/5
- Tempo stimato
- 1-2 giorni
- Idoneità per principianti
- 35/100
- Tipo di issue
- Bug
- Chiarezza
- Abbastanza chiara
- Stato di attività
- Attiva
- Stack tecnologico
- python
- Ambito
- authorization
Direzione di ricerca
Trace the organization membership removal flow used from the SHARING tab, focusing on how it authorizes removal of the current user. Find the permission check that allows an organization admin to remove themselves and determine how the expected web admin approval should work. Done means self-removal is blocked or requires approval, with the behavior covered by a test.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Descrizione
❌ This issue is not open for contribution. Visit Contributing guidelines to learn about the contributing process and how to find suitable issues.
Target branch: unstable
Observed behavior
An organization admin is able to remove their own membership from the organization.
Errors and logs
No application errors were reported. This is a policy/authorization issue in the organization membership management logic.
Expected behavior
Admins should not be able to remove themselves from an organization. At minimum, this action should be blocked or require approval from a web admin.
User-facing consequences
Self-removal can make the organization's membership history harder to audit by removing an admin without an explicit handoff. This may make it less clear why the admin's access ended and whether the change was an intended administrative decision.
Steps to reproduce
- Sign in as an organization admin.
- Open the organization's SHARING tab.
- Find yourself in the Users section.
- Remove yourself from the organization.
- Observe that the admin leaves the organization even though doing so should be restricted.
Context
This issue affects organization membership controls and is a direct authorization bug. The report notes this as a distinct case from removing another admin, and the underlying permission model appears to be incorrectly allowing self-removal.
AI usage
The bugs were gathered by a human and later turned into issue descriptions with the help of an AI assistant. The assistant was used to draft the wording and structure of the report, and the final text was reviewed and adjusted for accuracy based on the supplied bug summary.
- Lingua principale
- Python
- Stelle
- 192
- Fork
- 310
- Merge medio
- 2g 10h
- PR unite (30g)
- 66
Preparare l'ambiente
- Include un Dockerfile o un file Docker Compose
- Nessun modello di pull request
- Leggi la guida per i contributori
Come iniziare
- Leggi tutta la issue e poi la guida ai contributi del progetto.
- Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
- Fai un fork del repository e lavora su un branch.
- Apri una pull request che faccia riferimento al numero della issue.
Altre issue di learningequality/studio
-
Set unpublishable: true on PublishedChange by construction to simplify handleMaxRevs predicateApertaDEV: frontend P3 - low
Difficoltà 2/5 1-3 ore Idoneità per principianti 74/100
learningequality/studio#5868 ·
I maintainer di solito rispondono entro 1 giorno
-
TAG: tech update / debt
Difficoltà 2/5 1-3 ore Idoneità per principianti 62/100
learningequality/studio#2245 ·
I maintainer di solito rispondono entro 1 giorno
-
bug DEV: frontend P0 - critical
Difficoltà 3/5 1-2 giorni Idoneità per principianti 22/100
learningequality/studio#6316 · 1 commento ·
I maintainer di solito rispondono entro 1 giorno
-
bug
Difficoltà 4/5 1-2 giorni Idoneità per principianti 25/100
learningequality/studio#6314 ·
I maintainer di solito rispondono entro 1 giorno
-
bug
Difficoltà 3/5 1-2 giorni Idoneità per principianti 25/100
learningequality/studio#6313 ·
I maintainer di solito rispondono entro 1 giorno
Tutte le issue di learningequality/studio
Issue simili
-
approved Good First Issue scope: docs
Difficoltà 1/5 Meno di un'ora Idoneità per principianti 85/100
hiero-ledger/hiero-sdk-python#2730 · 3 commenti ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 62/100
wemake-services/wemake-django-template#3178 · 1 reazione ·
I maintainer di solito rispondono entro 1 giorno
-
md/asciidoc/csv: an explicit `encoding="utf-8"` keeps a leading BOM, the auto-detect path drops itAperta
Difficoltà 2/5 1-3 ore Idoneità per principianti 82/100
docling-project/docling#4846 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
neurostuff/NiMARE#1181 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
pytest-dev/pytest#15180 ·
I maintainer di solito rispondono entro 1 giorno