hailin
/
it0
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(tenants): allow platform_admin to delete tenants; fix invite/user cleanup 

- DELETE /api/v1/admin/tenants/:id now accepts platform_admin role
- Fix cascade cleanup to use tenant slug (not UUID) for users/invites/api_keys

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
hailin 2026-03-07 04:44:42 -08:00
parent 129c5cbeab
commit 6459e5b500
1 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
packages/services/auth-service/src/interfaces/rest/controllers/tenant.controller.ts
View File

@ -397,7 +397,7 @@ export class TenantController {
* DELETE /api/v1/admin/tenants/:id
*/
@Delete(':id')
@Roles('platform_super_admin')
@Roles('platform_admin', 'platform_super_admin')
async deleteTenant(@Param('id') id: string) {
const tenant = await this.findTenantOrFail(id);
@ -409,8 +409,14 @@ export class TenantController {
this.logger.error(`Failed to deprovision schema for "${tenant.slug}":`, err);
}
// 2. Delete all invites for this tenant
await this.inviteRepository.delete({ tenantId: id });
// 2. Delete related records (use slug — invite.tenantId stores slug)
await this.inviteRepository.delete({ tenantId: tenant.slug });
await this.dataSource.query(
`DELETE FROM public.users WHERE tenant_id = $1`, [tenant.slug],
);
await this.dataSource.query(
`DELETE FROM public.api_keys WHERE tenant_id = $1`, [tenant.slug],
);
// 3. Delete the tenant record
await this.tenantRepository.remove(tenant);