[SOLVED] User invited to team has access to team Permissions, but can't list team members

When a user is invited to a team, they immediately (without having accepted the invite) can access resources tagged with Role.team(teamId), however teams.listMemberships(teamId) fails until they accept.

I would expect users not to have access to those resources until they accept. Is this intended behaviour?

TL;DR

User invited to team has access to team permissions but can't list team members. The issue was resolved by using the `Permission.read(Role.any())` command. The user was adding new team members using the client SDK. The user expected that invited members should not have access to resources until they accept the invitation.

yes, they shouldn't have access to resources. how are you adding users?

TypeScript

teams.createMembership(
  id,
  [],
  email,
  undefined,
  undefined,
  "http://localhost:5173/accept_team_invitation",
);

This is using a client SDK?

Yep, from Web

Oh, wait, I'm an idiot - Permission.read(Role.any())

[SOLVED] User invited to team has access to team Permissions, but can't list team members

Reply to this thread by joining our Discord

Reply on Discord

Need support?

Join our Discord

Get community support by joining our Discord server.

Join Discord

Get premium support

Join Appwrite Pro and get email support from our team.

Learn more

Recommended threads

Need support?

Join our Discord

Get premium support