Finding · openhands

Operational: Cascade-delete sole-org requester on DELETE /api/organizations

What Changed

Organization deletion now cascade-deletes user when requester is sole-org member (personal org), enabling re-onboarding on next login. Safeguards against orphaning multi-org users by rejecting deletion if other members would lose all org affiliations.

Operator Implication

Operators should understand that DELETE /api/organizations now deletes the requesting user if they only belong to that organization (personal org). Database cascade logic requires careful backup before org deletion. Multi-org users remain protected from accidental data loss.

Receipt

Commit 82744a0 (2026-06-03T18:20:13Z): 'Cascade-delete sole-org requester on DELETE /api/organizations (#14617)' - Modifies org_store.py, org_service.py with pr

Finding metadata

Confidence: high
Actionability: observe
Accessibility impact: none

Run: 2026-06-03-weekly-digest-2026-05-28_2026-06-03-frontier-v0

Finding ID: 2026-06-03-openhands-cascade-delete-org

Accepted signals

DELETE /api/organizations now cascade-deletes the sole-org requester (personal org) · 2026-06-03

Source links

Primary links, including exact changelog lines when available.

OpenHands
commitCommit 82744a0 (2026-06-03T18:20:13Z): 'Cascade-delete sole-org requester on DELETE /api/organizations (#14617)' - Modifies org_store.py, org_service.py with preflight orphan detection, foreign key clgithub.com/OpenHands/OpenHands/commit/82744a0

Versioned source: run artifact