bcgov / entity

ServiceBC Registry Team working on Legal Entities
Apache License 2.0
23 stars 58 forks source link

AUTH-API - find_membership_by_userid potentially selecting wrong org_id #15756

Open seeker25 opened 1 year ago

seeker25 commented 1 year ago

image.png

It's possible this call could be selecting the wrong org id, as it picks a single row from the membership table ordered by the created date.

We should fix this so it chooses a specific org_id.

This could potentially cause issues in:

  1. Task user approval
  2. Create and add membership (BCROS users / bulk users)
  3. Deleting OTP for user
  4. Reset password for anon user
  5. Delete anonymous user

image.png

JohnamLane commented 1 year ago

Hey team! Please add your planning poker estimate with Zenhub @AshnaMehta @Jxio @seeker25