yindo/posthog
1
0
Fork 0
mirror of https://github.com/BillyOutlast/posthog.git synced 2026-02-04 03:01:23 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: Scope down the has_sso_enforcement to the current org (#37442)

Browse Source 
Co-authored-by: Zach Waterfield <zlwaterfield@gmail.com>
This commit is contained in:
Yasen
2025-09-01 21:14:48 +03:00
committed by GitHub
parent 5103e661e9
commit f8f99147e7
2 changed files with 18 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
posthog/api/user.py
View File

@@ -199,7 +199,13 @@ class UserSerializer(serializers.ModelSerializer):
def get_has_sso_enforcement(self, instance: User) -> bool:
from posthog.models.organization_domain import OrganizationDomain
return bool(OrganizationDomain.objects.get_sso_enforcement_for_email_address(instance.email))
organization = instance.current_organization
if not organization:
return False
return bool(
OrganizationDomain.objects.get_sso_enforcement_for_email_address(instance.email, organization=organization)
)
def validate_set_current_organization(self, value: str) -> Organization:
try:

19
posthog/models/organization_domain.py
View File

@@ -62,19 +62,22 @@ class OrganizationDomainManager(models.Manager):
return True
return False
def get_sso_enforcement_for_email_address(self, email: str) -> Optional[str]:
def get_sso_enforcement_for_email_address(
self, email: str, organization: Organization | None = None
) -> Optional[str]:
"""
Returns the specific `sso_enforcement` applicable for an email address or an `OrganizationDomain` objects.
Validates SSO providers are properly configured and all the proper licenses exist.
"""
domain = email[email.index("@") + 1 :]
query = (
self.verified_domains()
.filter(domain__iexact=domain)
.exclude(sso_enforcement="")
.values("sso_enforcement", "organization_id", "organization__available_product_features")
.first()
)
queryset = self.verified_domains().filter(domain__iexact=domain).exclude(sso_enforcement="")
if organization is not None:
queryset = queryset.filter(organization=organization)
query = queryset.values(
"sso_enforcement", "organization_id", "organization__available_product_features"
).first()
if not query:
return None