Organizations: roles and public/private visibility surfaced correctly #83

Activity

1. Adron

   added

   parityClosing a gap against interlinedlist.comClosing a gap against interlinedlist.com

   P3Niche or minorNiche or minor

   area:organizationsOrganizationsOrganizations

   on Sep 15, 2026
2. Adron

   added a parent issue on Sep 15, 2026

   • Organizations parity gaps #80
3. Adron commented on Sep 16, 2026

   

   Adron

   on Sep 16, 2026

   MemberAuthor

   More actions

   Implemented in the PR above (branch issue/83-org-roles-visibility). Closing here — review and any follow-up happens on the PR.

   The role matrix is taken verbatim from /help/organizations rather than invented, and #81's known gap (Edit/Delete offered to non-members) is closed.

   Three real wire bugs were found and fixed along the way:

   1. isPublic was serialised as a string on create and update. The server returns 500 {"error":"Internal server error"} for "isPublic":"false" and 200 for "isPublic":false — so organization visibility never round-tripped from the app at all.
   2. The PUT echo omits userRole and memberCount, so mapping it straight through made the owner who had just edited the org look like a non-member, hiding the actions they had just used.
   3. isSystem was not modelled, which is why Leave was being offered on "The Public".

   One thing worth raising on the server side: the API does not appear to enforce these role rules on the member endpoints. A plain member POSTing to /members got a 500 (foreign-key failure), not a 403, and PUT/DELETE on a member returned 404 "User is not a member of this organization" rather than a permission error. The Android gating is therefore the practical protection, which is not where you want it.

   Also captured but not implemented: member suspend (active) — the server requires role alongside it ({"active":false} alone returns 400 "Valid role (owner, admin, or member) is required").
4. Adron

   closed this as completedon Sep 16, 2026
5. Adron

   added a commit that references this issue on Sep 16, 2026

   merge: #83 organization roles + visibility (PR)

   3f76a69