[sofyenne]

No description provided.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[boubaker]

Review — MIP-237 (part of the core#138 · portal#1300 · social#5962 · meeds#4273 set)

Reviewed against the spec in Meeds-io/MIPs#237. Findings verified against head commit c576e8d.

No functional issue in this PR itself: the MyOrganizationalUnits portlet is added to the global myteam page with a matching one-shot LayoutUpgradePlugin (merge import mode), consistent with the sibling upgrade entries in the same file.

🟢 Nit — PR/commit title typo: "oragnizational" → "organizational" (it will land in develop history via the merge commit).

⚠️ Heads-up for the merge order: this PR set should not be merged until the 🔴 Critical ACL finding on Meeds-io/social#5962 (any authenticated user can enumerate any group's members via GET /v1/social/users?groupId=...) and the 🟠 High startup NPE on Meeds-io/core#138 are fixed — the whole set is classified N1 (socle) and requires a priori human validation by an Archi/Dev, no auto-merge.

🤖 Generated with Claude Code

[boubaker]

Re-review update — cross-PR status

Follow-up to the initial review (this PR itself is unchanged, head c576e8d):

#	Blocker referenced here	Status
🔴	Group-member enumeration/export ACL gap — Meeds-io/social#5962	✅ Fixed and covered by a regression test
🟠	Startup NPE in updateGroups sync — Meeds-io/core#138	✅ Fixed
🟠	Parent→subgroup removal cascade (MIP-237 business rule) — Meeds-io/portal#1300	⚠️ Still open — needs the Service-layer cascade or a spec amendment before the set merges
🟢	PR title typo "oragnizational"	⚠️ Still as-is

N1 classification of the set unchanged: a priori human validation by an Archi/Dev, no auto-merge.

🤖 Generated with Claude Code