fix(rbac): block invite role escalation via pending invitations - #3281

Open

riderx wants to merge 16 commits into

mainfrom

cursor/fix-invite-role-escalation-566b

Commits on Sep 8, 2026

fix(rbac): block invite role escalation via tmp_users RPC and acceptance

cursoragent
and
riderx
committed
23850d3
fix(types): add tmp_users.invited_by_user_id and closeClient args

cursoragent
and
riderx
committed
4c10a4e
test(rbac): fix tmp_users invite guard tests for RLS and aborted tx

cursoragent
and
riderx
committed
2a67dad
chore: retrigger CI after flaky Cloudflare shard

cursoragent
and
riderx
committed
9eb6d71
fix(rbac): address review feedback on invite acceptance guards

cursoragent
and
riderx
committed
f7fea62
fix(types): include invitation email in grantable assertion input

cursoragent
and
riderx
committed
85d8921
chore: retrigger CI after review fixes

cursoragent
and
riderx
committed
fe9b5ce
fix(rbac): atomic tmp invite acceptance and lock-before-read

cursoragent
and
riderx
committed
f9cf263
fix(rbac): harden tmp invite acceptance edge cases

cursoragent
and
riderx
committed
4b81fd1
chore: retrigger CI after flaky shard failures

cursoragent
and
riderx
committed
963c8d4

Commits on Sep 9, 2026

fix(rbac): serialize invite role updates and finalize guards

cursoragent
and
riderx
committed
3dce03a
test: use savepoint for tmp invite escalation rejection

cursoragent
and
riderx
committed
4b4062f
fix(rbac): lock before invite-role auth and guard org accept finalize

cursoragent
and
riderx
committed
9b79ba8
chore: retrigger CI after flaky Cloudflare shard failure

cursoragent
and
riderx
committed
030b6c3
fix(rbac): roll back invite acceptance when finalize update is a no-op

cursoragent
and
riderx
committed
1ba2532
fix(rbac): place FOR UPDATE after LIMIT in tmp invite select

cursoragent
and
riderx
committed
f447b98