User as Central Tenant - API

[kaseywright]

There is a need to refactor the application to make the User the central tenant instead of the Org. This is a significant refactor as it touches many of the authorization middleware, queries and db structure.

Attached are the Design Spec and tentative implementation plan files. There is also a google doc that contains a graphic and user stories for illustration.

There will be a few frontend changes that will need to happen in parallel with these changes. We should track those in a separate ticket.

2026-06-02-user-central-tenant-rbac-design.md

2026-06-02-user-central-tenant-rbac.md

202607-07 Added context to clarify schema changes:
2026-07-02-org-membership-and-solo-workflow-design.md

[AnuMonachan]

• Documentation review and analysis (6 hrs)
• DB schema redesign and migration files (6 hrs)
• Auth setup update acc. to requirement (8 hrs)
• Code suggestion updates, enhancements after vulnerability checks (6 hrs)
• Code review fixes (6 hrs)
• Unit Testing - Liju (3 hrs)

SP12

• Fix db migration and snapshot files, merge code (resolve conflicts if any (ET - 6 hrs)

SP : 14
QA Review Fix : 3 hr ( Joel )