Add member access level system with owner promotion and security controls

Shipped

April 11, 2026 at 6:04 PM UTC

Author

Kamo

Commit

9d1f6a0

Rename CLIENT→MEMBER and INTERNAL→TEAM_MEMBER in ImageAccessLevelType with {var} placeholders for org-specific labels. Move securityLevel from TeamMember to Member for universal access control. Add isOrganizationOwner flag to TeamMember. Add EDIT_MEMBER_ACCESS_LEVEL right to RoleRightType. Add createOrganizationOwner and updateMemberAccess methods to MemberService with full business rule enforcement.