v12.116.43

🆕 Changelog

Security

• Restricted access to admin check functions to service role only, removing public execute permissions
• Hardened platform admin resolution path to prevent unauthorized access
• Enforced minimum privilege guidance for PostgreSQL functions
• Scoped SSO enforcement lookups to prevent unauthorized domain access

Fixed

• Resolved login redirect issues
• Corrected spelling mistakes in user-facing text
• Fixed migrations issues related to is_admin function
• Synchronized organization user deletion with RBAC bindings
• Corrected SSO enforcement domain lookup logic
• Fixed platform admin checks to properly await before navigation
• Resolved CLI issues affecting command execution

Changed

• Split is_admin function into separate platform and organization admin checks
• Migrated platform admin validation to role-based system using admin_users secret
• Updated frontend and types to use is_platform_admin for admin route authorization
• Reorganized admin function permissions and RLS policies into split migrations

---

🔗 Full Changelog: v12.116.42...v12.116.43