Invalidate old invitations when organization membership changes

Signed-off-by: Cole Speelman <crspeelman@gmail.com>
2026-09-05 00:12:40 -04:00
parent c0986168bc
commit f142ac23a9
4 changed files with 73 additions and 3 deletions
@@ -11,6 +11,9 @@
  policy. Persist the required grantor authority and recheck it at acceptance,
  together with active, fully registered users and recipient email. Suspended
  members cannot reactivate themselves by accepting an older invitation.
+- Invitations enroll new members rather than adding permissions to existing
+  members. Membership removal revokes pending invitations for that recipient
+  in the same transaction, preventing an older offer from restoring access.
 - Add SQLite schema 10 for invitation role sets and stored owner authority.
  Legacy single-role data remains readable after explicit migration; older
  schema-9 applications are not approved writers of the migrated database.