Open
Description
Steps to Reproduce
- As a maintainer, visit the show page for an organization (ex.
organizations/rubygems
) - Note the presence of the "Members" card, which lists memberships
- Click on the link to "Members" in the side nav panel
- Observe the resulting policy-based 404
Expected Behavior
Consistency between the organizations
show page member panel and the organization/memberships
index page.
Current Behavior
A maintainer is able to view the members on the organizations
show page, but not the organization/memberships
index page.
Possible Solution
- Allow maintainers to view the
organization/memberships
index page (blocking invites by policy)
OR
- Prevent maintainers from viewing members altogether
Environment
Browser and its version: Safari 18.5
RubyGems version: 3.6.7