mirror of
https://github.com/hanzoai/compute.git
synced 2026-10-30 14:50:41 +00:00
platformOwner named any org, and any member of that org could write a row in it, so a hanzo member's AWS row named hanzo-compute drove the hosted account: listing every tenant's instance and stopping them. The platform owner is now the one SuperAdmin predicate, owner == "admin", with the platformOwner setting removed. A row naming AWS hanzo-compute is refused for every owner, and hosted compute alone reaches that account. Co-authored-by: Hanzo Dev <[email protected]>