This repository has been archived on 2026-05-24. You can view files and clone it. You cannot open issues or pull requests or push a commit.

groombook-ci[bot] c76a37b15c fix(staff): add revoke button to super user rows + serialize guardrail in transaction ...

Frontend:
- Super users now see a "Revoke" button (disabled when last super user)
  alongside the ★ badge on super-user rows in the Staff table.
  Non-super-user rows show the existing "+ Grant" button.

Backend (race condition fix):
- PATCH /api/staff/:id (isSuperUser=false or active=false): count check +
  update now wrapped in a db.transaction() with FOR UPDATE lock on the
  target row, preventing a race where two concurrent revokes could both
  pass the guard and leave zero super users.
- DELETE /api/staff/🆔 same transaction + FOR UPDATE guard applied.

GRO-206 CTO review feedback

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-03-29 12:11:53 +00:00

..

api

fix(staff): add revoke button to super user rows + serialize guardrail in transaction

2026-03-29 12:11:53 +00:00

e2e

feat(portal): replace mock data with real session-driven API calls (#152)

2026-03-29 07:08:35 +00:00

web

fix(staff): add revoke button to super user rows + serialize guardrail in transaction

2026-03-29 12:11:53 +00:00