feat: harden tenant access and production operations

2026-08-24 22:02:22 +08:00
parent ffb27d845b
commit 9811469a64
18 changed files with 709 additions and 36 deletions
@@ -72,7 +72,7 @@ try {
  const invitation = await request("/api/organizations/org-studio-lab/invitations", ownerHeaders, {
    method: "POST",
    headers: { "content-type": "application/json" },
-    body: JSON.stringify({ email, roleKey: "writer", workspaceId: "ws-local-aidrama", projectId: "thunder-mouth" })
+    body: JSON.stringify({ email, roleKey: "project_editor", workspaceId: "ws-local-aidrama", projectId: "thunder-mouth" })
  });
  assert(invitation.response.status === 201 && invitation.payload.invitation.inviteToken, "MFA 测试用户邀请创建失败");