7 commits

Author	SHA1	Message	Date
Alexandre Brandizzi	8a4de283dc	Merge remote-tracking branch 'origin/dev' into feat/ab/sh-326-team-member ... # Conflicts: # Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs # SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs	2026-09-17 14:06:12 -03:00
Alexandre Brandizzi	db8470fbf9	chore(team-members): sync with dev (SH-325)	2026-09-16 21:52:44 -03:00
Alexandre Brandizzi	b9c916cb22	feat(team-members): add member detail editing (SH-326)	2026-09-16 21:41:55 -03:00
Alexandre Brandizzi	8a00476d38	feat(team-members): support pending member creation (SH-325)	2026-09-16 21:41:55 -03:00
Alexandre Brandizzi	af441894d7	fix(permissions): clean up overrides on user delete and converge concurrent override writes (SH-328) ... DeleteUserWithCascadeAsync never removed UserPermissionOverrides rows, and the FK on UserId is Restrict. Once an override was saved for a member, the admin hard-delete (DeleteUserAsync -> DeleteUserWithCascadeAsync) failed the foreign key inside the transaction and the controller surfaced it as a 400, so the user was never deleted. Add an explicit ExecuteDelete on UserPermissionOverrides before the user is removed, matching how UserRoles is already cleared in the same method (no schema change). SetOverrideAsync was check-then-insert on the composite key with no DbUpdateException handling, so two concurrent PUTs for the same (UserId, PermissionKey) let the loser violate PK_UserPermissionOverrides and return 500. Catch the conflict, detach the pending insert, and converge by updating the persisted row to the caller's requested state.	2026-09-16 20:27:26 -03:00
Alexandre Brandizzi	fc5c7d5ca4	feat(team-members): support pending member creation (SH-325)	2026-09-16 19:14:36 -03:00
Alexandre Brandizzi	441735d39d	feat(permissions): expose team member permission overrides (SH-328)	2026-09-16 18:02:02 -03:00