Grant top-level org owners cross-org delete/update access

Shipped: May 12, 2026 at 1:49 AM UTC
Author: Kamo
Commit: e06fa5e

deleteDomain and updateDomain previously rejected platform admins operating on child-org domains because they checked isUserOwnerOfOrg against the target org directly, with no bypass for top-level org owners — unlike the read flows (getAllDomains, getDomainById). Net effect: a top-level admin could view a child org's domain but silently 403 on any attempt to change or remove it. Reuse hasElevatedCrossOrgAccess (top-level owner / system member) so both write flows match the read flows. Also log the rejection so the silent 403 is no longer invisible to debugging.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free Forever View Pricing