Method updateOrg

controlplane/admin/api.go:559–656

(c *gin.Context)

		return nil, nil, err
	}
	return &prev, &stored, nil
}

func (s *gormAPIStore) ListUsers() ([]configstore.OrgUser, error) {
	var users []configstore.OrgUser
	if err := s.db().Find(&users).Error; err != nil {
		return nil, err
	}
	return users, nil
}

func (s *gormAPIStore) CreateUser(user *configstore.OrgUser) error {
	return s.db().Create(user).Error
}

func (s *gormAPIStore) GetUser(orgID, username string) (*configstore.OrgUser, error) {
	var user configstore.OrgUser
	if err := s.db().First(&user, "org_id = ? AND username = ?", orgID, username).Error; err != nil {
		return nil, err
	}
	return &user, nil
}

func (s *gormAPIStore) UpdateUser(orgID, username, passwordHash string, passthrough *bool, maxVCPUs *int) (*configstore.OrgUser, bool, error) {
	updates := map[string]interface{}{}
	if passwordHash != "" {
		updates["password"] = passwordHash
	}
	if passthrough != nil {
		updates["passthrough"] = *passthrough
	}
	if maxVCPUs != nil {
		updates["max_vcpus"] = *maxVCPUs
	}
	if len(updates) == 0 {
		// Nothing to change — return the current row so callers can still
		// distinguish "user not found" from "no-op update".
		user, err := s.GetUser(orgID, username)
		if err != nil {
			if errors.Is(err, gorm.ErrRecordNotFound) {
				return nil, false, nil
			}
			return nil, false, err
		}
		return user, true, nil
	}
	found := false
	err := s.db().Transaction(func(tx *gorm.DB) error {
		if err := configstore.LockOrgConnectionAdmissionTx(tx, orgID); err != nil {
			return err
		}

		result := tx.Model(&configstore.OrgUser{}).
			Where("org_id = ? AND username = ?", orgID, username).
			Updates(updates)
		if result.Error != nil {
			return result.Error
		}