Skip to content

fix(cli): participant remove keeps the SSO organisations - #327

Merged
iheitlager merged 3 commits into
mainfrom
fix/324-cli-sso-guard
Nov 14, 2026
Merged

iheitlager merged 3 commits into
mainfrom
fix/324-cli-sso-guard

Conversation

@iheitlager

Copy link
Copy Markdown
Member

Summary

Changes

Fixed

  • crates/frank/src/cli.rs: participant remove reads FRANK_SSO_ORGANISATION and FRANK_SSO_ADMIN_ORGANISATION (or --sso-organisation, --sso-admin-organisation) and refuses an organisation either names, by name or id, naming the setting in the error.
  • Spec 012 Requirement 9: one Tests: line per scenario. The three admin-group scenarios shared one line, so check-assurance counted two as untested (14/16).

Changed

  • Spec 011 Requirement 2: the CLI is covered by the SSO rule, with a scenario and test link. Spec 030: the remove button is among the superadmin-only controls. README: the participant remove line.
  • tests/mcdc/obligations.json: regenerated (make mcdc-obligations).

Added

  • crates/frank/tests/cli.rs::participant_remove_needs_no_users_and_no_sso_setting.

Changelog

  • frank participant remove refuses an organisation FRANK_SSO_ORGANISATION or FRANK_SSO_ADMIN_ORGANISATION names, as the API does, so serve keeps starting.

Testing

  • make test: 379 passed, 0 failed
  • make lint clean
  • make check-assurance: tested 100%, 0 dead links (spec 012 back to 16/16)
  • make test-mcdc: 48/48 covered
  • On STACKIT: podman exec frank frank participant remove lab271 is refused while FRANK_SSO_ORGANISATION=lab271

Related Issues

Follow-up to #324, which #325 closed. Supersedes the closed duplicate #326.


🤖 Generated with Claude Code

iheitlager and others added 3 commits November 14, 2026 22:40
The three admin-group scenarios shared one Tests line after the last,
so check-assurance counted two as untested (14/16).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The API refused to remove an organisation FRANK_SSO_ORGANISATION or
FRANK_SSO_ADMIN_ORGANISATION names, the command line did not: on the
host an empty landing organisation could go, and serve would then not
start. participant remove reads the same settings (or --sso-organisation
and --sso-admin-organisation) and refuses, by name or id. Adds the CLI
test, and spec 030 lists the remove button among the superadmin-only
controls.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@iheitlager
iheitlager merged commit 15cdbac into main Nov 14, 2026
6 checks passed
@iheitlager
iheitlager deleted the fix/324-cli-sso-guard branch November 14, 2026 23:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant