chore(webapp): drop over-explicit comments above authorize calls

nicktrn · nicktrn · commit 96bc9583a597 · 2026-07-06T11:21:46.000+01:00
diff --git a/apps/webapp/app/routes/api.v1.orgs.$orgParam.ts b/apps/webapp/app/routes/api.v1.orgs.$orgParam.ts
@@ -46,8 +46,6 @@ export async function action({ request, params }: ActionFunctionArgs) {
       return json({ error: "Organization not found" }, { status: 404 });
     }
 
-    // Rename/delete are Owner-only (via manage:all). Membership resolution above
-    // is the OSS floor; this is the role gate enforced when the RBAC plugin runs.
     const denied = await authorizePatOrganizationAccess({
       request,
       organizationId: organization.id,
diff --git a/apps/webapp/app/routes/api.v1.projects.$projectRef.default-region.ts b/apps/webapp/app/routes/api.v1.projects.$projectRef.default-region.ts
@@ -55,7 +55,6 @@ export async function action({ request, params }: ActionFunctionArgs) {
       return json({ error: "Project not found" }, { status: 404 });
     }
 
-    // Setting a project's region is Owner-only (via manage:all).
     const denied = await authorizePatOrganizationAccess({
       request,
       organizationId: project.organizationId,
diff --git a/apps/webapp/app/routes/api.v1.projects.$projectRef.ts b/apps/webapp/app/routes/api.v1.projects.$projectRef.ts
@@ -114,8 +114,6 @@ export async function action({ request, params }: ActionFunctionArgs) {
     return json({ error: "Project not found" }, { status: 404 });
   }
 
-  // Rename/delete are Owner-only (via manage:all); membership resolve above is
-  // the OSS floor, this is the role gate when the RBAC plugin runs.
   const denied = await authorizePatOrganizationAccess({
     request,
     organizationId: project.organizationId,

Original file line number	Diff line number	Diff line change
`@@ -46,8 +46,6 @@ export async function action({ request, params }: ActionFunctionArgs) {`
`46`	`46`	`return json({ error: "Organization not found" }, { status: 404 });`
`47`	`47`	`}`
`48`	`48`
`49`		`- // Rename/delete are Owner-only (via manage:all). Membership resolution above`
`50`		`- // is the OSS floor; this is the role gate enforced when the RBAC plugin runs.`
`51`	`49`	`const denied = await authorizePatOrganizationAccess({`
`52`	`50`	`request,`
`53`	`51`	`organizationId: organization.id,`
Original file line number	Diff line number	Diff line change
`@@ -55,7 +55,6 @@ export async function action({ request, params }: ActionFunctionArgs) {`
`55`	`55`	`return json({ error: "Project not found" }, { status: 404 });`
`56`	`56`	`}`
`57`	`57`
`58`		`- // Setting a project's region is Owner-only (via manage:all).`
`59`	`58`	`const denied = await authorizePatOrganizationAccess({`
`60`	`59`	`request,`
`61`	`60`	`organizationId: project.organizationId,`
Original file line number	Diff line number	Diff line change
`@@ -114,8 +114,6 @@ export async function action({ request, params }: ActionFunctionArgs) {`
`114`	`114`	`return json({ error: "Project not found" }, { status: 404 });`
`115`	`115`	`}`
`116`	`116`
`117`		`- // Rename/delete are Owner-only (via manage:all); membership resolve above is`
`118`		`- // the OSS floor, this is the role gate when the RBAC plugin runs.`
`119`	`117`	`const denied = await authorizePatOrganizationAccess({`
`120`	`118`	`request,`
`121`	`119`	`organizationId: project.organizationId,`