Description
Describe the bug
Currently, users are able to create multiple organizations under the same account. This allows a user to belong to multiple organizations with the same email, which is not intended behavior. Additionally, users can access and view all projects and sensitive information related to other organizations, even though they are not supposed to have access. Users should not be able to create a new organization or access data from other organizations unless explicitly authorized, all in all "Org level" access control is needed.
Note: The "user" referenced here refers specifically to a superuser.
Expected behavior
The expected behavior is that a user should:
-
Not be able to create a new organization if they already belong to one. Instead, they should either:
-
Be prevented from creating a new organization.
-
Receive a message that they already belong to an organization and cannot create a new one.
-
Not be able to access projects or data from other organizations unless explicitly granted access. Users should only be able to access data related to the organization they belong to.
Sub-issues
Metadata
Metadata
Assignees
Labels
Type
Projects
Status