[Fix] fix getRoles for demo

[ijreilly]

following #15547

[Weiko]

LGTM

[greptile-apps]

Greptile Overview

Greptile Summary

This PR completes the work started in PR #15547 by adding shouldBypassPermissionChecks: true to two remaining workspaceMember repository calls that were missed in the initial implementation.

Changes:

• microsoft-apis.service.ts:161 - Added bypass flag to workspaceMember repository call in the reconnection flow
• user-role.service.ts:156 - Added bypass flag to workspaceMember repository call when retrieving members assigned to a role

Context:
PR #15547 introduced the ability to work with workspaceMember as a non-system object for demo purposes. This requires bypassing permission checks for all workspaceMember repository calls. This PR ensures consistency across the codebase by adding the flag to two locations that were overlooked.

The changes are safe because:

1. workspaceMember was previously a system object with permissions already bypassed
2. System-level permissions for workspace member operations are checked elsewhere
3. This maintains functional parity with the previous behavior while supporting the demo workspace configuration

Confidence Score: 5/5

• This PR is safe to merge with no risk - it completes a pattern established in PR #15547
• Score reflects that these are minimal, mechanical changes following an established and reviewed pattern from PR #15547. The changes add explicit permission bypass flags to workspaceMember repository calls, which maintains the same effective behavior as before (since workspaceMember was a system object). No logic changes, no new functionality, just consistency improvements.
• No files require special attention - both changes are straightforward parameter additions

Important Files Changed

File Analysis

Filename	Score	Overview
packages/twenty-server/src/engine/core-modules/auth/services/microsoft-apis.service.ts	5/5	Added shouldBypassPermissionChecks: true to workspaceMember repository call on line 161, consistent with PR #15547 pattern
packages/twenty-server/src/engine/metadata-modules/user-role/user-role.service.ts	5/5	Added shouldBypassPermissionChecks: true to workspaceMember repository call on line 156, consistent with PR #15547 pattern

Sequence Diagram

sequenceDiagram
    participant Service as MicrosoftAPIsService/UserRoleService
    participant ORM as TwentyORMGlobalManager
    participant Repo as WorkspaceMemberRepository
    participant DB as Database

    Note over Service,DB: PR #15666: Adding shouldBypassPermissionChecks

    Service->>ORM: getRepositoryForWorkspace(workspaceId, 'workspaceMember', {shouldBypassPermissionChecks: true})
    Note over ORM: Before: No third parameter<br/>After: Added bypass flag
    ORM->>Repo: Create repository with bypass flag
    Repo-->>Service: WorkspaceMemberRepository
    Service->>Repo: findOneOrFail() / find()
    Note over Repo: Bypasses permission checks<br/>for demo workspace support
    Repo->>DB: Query workspaceMember
    DB-->>Repo: WorkspaceMember data
    Repo-->>Service: WorkspaceMember entity

Loading

_{2 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}