Skip to content

Authentication : Can Create/Access Multiple Organizations with the Same User Account #154

Open
0 of 2 issues completed
@nishika26

Description

@nishika26

Describe the bug
Currently, users are able to create multiple organizations under the same account. This allows a user to belong to multiple organizations with the same email, which is not intended behavior. Additionally, users can access and view all projects and sensitive information related to other organizations, even though they are not supposed to have access. Users should not be able to create a new organization or access data from other organizations unless explicitly authorized, all in all "Org level" access control is needed.

Note: The "user" referenced here refers specifically to a superuser.

Expected behavior
The expected behavior is that a user should:

  • Not be able to create a new organization if they already belong to one. Instead, they should either:

  • Be prevented from creating a new organization.

  • Receive a message that they already belong to an organization and cannot create a new one.

  • Not be able to access projects or data from other organizations unless explicitly granted access. Users should only be able to access data related to the organization they belong to.

Sub-issues

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

Projects

Status

Pending

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions