Update Users::UpdateService to check for :update_organization_user permission
Summary
The Users::UpdateService currently checks for the wrong permission when validating organization user updates.
Problem
In app/services/users/update_service.rb#L118, the can_update_organization_users? method checks for :update_organization permission:
current_user.can?(:update_organization, organization)This should instead check for :update_organization_user to properly validate the user's ability to update organization users.
Proposed Solution
Update line 118 to use the correct permission:
current_user.can?(:update_organization_user, organization)Edited by 🤖 GitLab Bot 🤖