Files
Steven Masley 1451f5281b feat(coderd): add organizations.default_org_member_roles for Gateway Accounts
Adds the column that drives per-org Gateway Accounts behavior. Effective
roles for an org member at request time are now the union of
organization_members.roles and organizations.default_org_member_roles,
so changes to the org default propagate to every member on the next
request. The deployment-wide default is
'organization-workspace-access', matching today's effective behavior.

The PATCH organization handler accepts the new field but rejects
deviations from the deployment default unless the
minimum-implicit-member experiment is enabled. The experiment constant
ships in this PR so the write-gating has something to check; the floor
shrink behavior lands in a follow-up.

Refs #25936. Stacks on #25929.
2026-06-02 18:40:39 +00:00
..
2023-09-08 18:21:33 +00:00