feat: 워크스페이스별 VM 보유 기관 제공 - #133
Merged
Merged
Conversation
The account directory answers for every organisation and the VM list does not, so the detail drawer's link into that list started landing on an empty page as soon as the directory opened. An empty page reads as "this person has no virtual machines" when the truth is "not in your scope", and the screen had no way to tell those apart: a workspace carries no organisation of its own, and the membership rows carried nothing but a name, a kind and a role. Each membership now reports the organisations it has live machines in, derived the same way membership itself is. A workspace can answer with more than one, so it is a list. The admin detail gets its own membership shape for this; the holder's own profile is unchanged. The org tier also stops receiving the public id of the administrator who changed an account's status. Status is written by SYS_ADMIN alone, so every actor on those rows is an account the org tier is not answered for, and the id is the handle that reopens it. The name and address stay: hiding those accounts is a rule about what may be managed, not a claim that the operators are anonymous, and an administrator fielding a question needs to know who acted.
The justification said every actor on a status row is system-tier, since disable and enable are SYS_ADMIN-only. A withdrawal is the exception: it records the holder as its own actor, and that id is the account being read. Blanking it was harmless but the rule as written was false, and a false rule is what the next change extends. The test now pins the organisation's own id and a deleted machine's exclusion, neither of which it held before.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
📝 작업내용
AdminMembership신설)/me와 분리, 사용자 프로필 응답은 무변화⭐️ 검증
AdminUsersTest7건과ContractDriftTest6건 포함actorId가 없고 시스템 계층에는 있는 것💬 리뷰 포인트