[SOLVED] User invited to team has access to team Permissions, but can't list team members
- 0
- Databases
- Accounts
- Web
When a user is invited to a team, they immediately (without having accepted the invite) can access resources tagged with Role.team(teamId), however teams.listMemberships(teamId) fails until they accept.
I would expect users not to have access to those resources until they accept. Is this intended behaviour?
yes, they shouldn't have access to resources. how are you adding users?
teams.createMembership(
id,
[],
email,
undefined,
undefined,
"http://localhost:5173/accept_team_invitation",
);
This is using a client SDK?
Yep, from Web
Oh, wait, I'm an idiot - Permission.read(Role.any())
[SOLVED] User invited to team has access to team Permissions, but can't list team members
Recommended threads
- Query multi-tenant db with $permissions ...
I'm setting up a multi-tenant database with RLS enabled. My users my have permissions set for multiple Teams, and as such when they query the database with the ...
- Authentication on custom Websocket Serve...
Hi, I want to use a custom Websocket Server (using Bun) for my application. However I cant really figure out authentication on custom servers. Session cookies ...
- Realtime for files() works almost well, ...
I have been trying to make use of realtime, today (14.03.26) I have pulled all the latest versions of docker images, and sdk available. Whats working: - Conn...