Skip to content

Filter provider admins from user list (for all but superadmins)#83

Merged
simon-20 merged 4 commits into
developfrom
sk-filter-provider-admins-reporting-org-endpoint
May 11, 2026
Merged

Filter provider admins from user list (for all but superadmins)#83
simon-20 merged 4 commits into
developfrom
sk-filter-provider-admins-reporting-org-endpoint

Conversation

@simon-20
Copy link
Copy Markdown
Contributor

@simon-20 simon-20 commented May 11, 2026

NOTE: This PR is compared against the sk-fix-editor-permissions... branch, so need to wait until that is merged then rebase, before merging this.

This PR fixes /reporting-org/{ID}/users so that it doesn't return the list of provider admins when logged in as a provider admin (super admins still see a user list which includes provider admins).

This resolves #80

simon-20 added 4 commits May 11, 2026 12:02
Previously anyone logged in as a PROVIDER_ADMIN saw in the
list of a reporting org's users all the other provider admins for
that org, but for now this is being removed until we have per-tool
handling.
This commit hides provider admins from the list of users
returned for reporting orgs for all except superadmins.
Filter provider admins from a reporting org's user list for other
provider admins (still viewable by superadmins).
@simon-20 simon-20 force-pushed the sk-filter-provider-admins-reporting-org-endpoint branch from fa29e91 to 89068e7 Compare May 11, 2026 11:40
@simon-20 simon-20 requested a review from chrisarridge May 11, 2026 11:40
@simon-20 simon-20 changed the title Sk filter provider admins reporting org endpoint Filter provider admins from user list (for all but superadmins) May 11, 2026
Base automatically changed from sk-fix-editor-permissions--upgrade-libsuitecrm to develop May 11, 2026 14:50
@simon-20 simon-20 merged commit de4a79f into develop May 11, 2026
5 checks passed
@simon-20 simon-20 deleted the sk-filter-provider-admins-reporting-org-endpoint branch May 11, 2026 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Provider admin users are not correctly filtered out from the /reporting-org/{}/users endpoint

2 participants