organizations 0.7.0 → 0.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 31b245f4e0966a2e2dd4c3eb7f29b6d226981bc608816d7b69e07fe4f8397082
-  data.tar.gz: 285885977f86a5695f75bc1a2ed6ad4ce63287f76fe7d8b1fa07590e9f13f148
+  metadata.gz: fba49577a4eb70a0bd69d5b554609a3a3b5a73046f1b0007219773b2e3cccd48
+  data.tar.gz: 8eba41990e24a6558de87d4760fabf09b65561fd43e4314e27f58ec5d838dbc3
 SHA512:
-  metadata.gz: 58c3126cda6583ca0b315c784bff2d3a53bb78edd999e32e047c62fcf621bf3f65c0424e682cd8cd3e95eaff8470bae1b35092d8012d4df6a5464b9c4c40e036
-  data.tar.gz: e52343ef673c5279f35ac7ba765188dcc3715daee9581fc847704d93065d4f4612c23d3fe6d314b8f4b017e6794ae6f8c9fab708c5a61052fd6939dc3486278d
+  metadata.gz: f49c6a4eba6854e3988c2a39d175f5616af10ef8723e3c6f91d461ca8f3bc4151cb9ddc64e0baf5ff5a83e474690eacc86362d149354c46e72c97b92bf2e9c7a
+  data.tar.gz: 9b83cc21331c095d64ea22ba5f4874a11716e634f2dffd664a7b5b3ed4768c9ac048e2f03a4c93bddd92e3661d6003dceeac0edc21f671c5ff327dff4241490e

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 ## [Unreleased]
 
+## [0.7.1] - 2026-10-19
+
+**A user whose invitation was accepted can now be deleted.** A patch release with one fix and one README correction. No migration is needed.
+
+### Fixed
+
+- **A user whose invitation was accepted could not be deleted.** Accepting an invitation copies the inviter into `organizations_memberships.invited_by_id`, whose foreign key has no `ON DELETE` rule, and nothing cleared it. `user.destroy` raised `ActiveRecord::InvalidForeignKey` and rolled back, whatever `account_deletion_policy` said. `has_organizations` now declares `invited_organization_memberships` with `dependent: :nullify`, as it does for sent invitations. No migration is needed. A deletion path that skips callbacks (`delete`, raw SQL) still meets the foreign key: give it `ON DELETE SET NULL` in your own migration if you have one.
+- README: the scoped resource grants example redefined only `viewer` and `member` in `config.roles`. A block that redefines a built-in role defines only the built-in roles it lists, so `admin` and `owner` were left with no permissions. The example now lists all four roles.
+
 ## [0.7.0] - 2026-10-18
 
 **Personal organizations, safe account deletion, domain authority, join screens, vocabularies and scoped resource grants.** This release closes issue #21. Every new feature is opt-in: an existing app that upgrades and runs `rails g organizations:upgrade` keeps its behaviour, apart from the changes listed under "Changed".

data/README.md

@@ -1012,19 +1012,36 @@ rails db:migrate
 Capabilities are checked against the role's permissions, so give your roles the capabilities they may use on granted records (custom roles work too):
 
 ```ruby
+# A block that redefines a built-in role defines only the built-in roles it
+# lists, so list all four: these are the defaults plus the capabilities.
 config.roles do
   role :viewer do
     can :view_organization
+    can :view_members
     can :read
   end
   role :client, inherits: :viewer do   # a narrow custom role
     can :comment
   end
   role :member, inherits: :viewer do
+    can :create_resources
+    can :edit_own_resources
+    can :delete_own_resources
     can :comment
     can :edit
   end
-  # admin and owner as usual (they inherit member)
+  role :admin, inherits: :member do
+    can :invite_members
+    can :remove_members
+    can :edit_member_roles
+    can :manage_settings
+    can :view_billing
+  end
+  role :owner, inherits: :admin do
+    can :manage_billing
+    can :transfer_ownership
+    can :delete_organization
+  end
 end
 ```
 

data/lib/organizations/models/concerns/has_organizations.rb

@@ -105,6 +105,13 @@ module Organizations
                      inverse_of: :invited_by,
                      dependent: :nullify
 
+            # Memberships those invitations became. Nullified on deletion like
+            # the invitations: the install migration gives invited_by_id a
+            # foreign key with no ON DELETE rule, so without this the database
+            # refuses to delete anyone whose invitation was accepted.
+            has_many :invited_organization_memberships, class_name: "Organizations::Membership",
+                                                        foreign_key: :invited_by_id, inverse_of: :invited_by, dependent: :nullify
+
             define_verified_joining_associations
           end
 

data/lib/organizations/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Organizations
-  VERSION = "0.7.0"
+  VERSION = "0.7.1"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: organizations
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.7.1
 platform: ruby
 authors:
 - rameerez
 bindir: exe
 cert_chain: []
-date: 2026-10-18 00:00:00.000000000 Z
+date: 2026-10-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties