bgevconsultancy puts an approval desk in front of every new organisation user

New users now wait in a holding area until an administrator approves or denies their request. Approval creates their organisation membership; denial keeps them out.

The work also gives administrators two ways to manage that queue:

• Organisation administrators can approve or deny requests for their own organisation.
• Super-administrators can manage pending requests across organisations.

It removes the old assumption that every signup should be dropped into a default organisation. That matters because multi-tenant security is not only about separating client data after access is granted. It is also about deciding who gets access in the first place.