From 71f18149b2b403e7f7e8cf2aa8771b7e2197d0ee Mon Sep 17 00:00:00 2001
From: Rotimi Best <best@classroomio.com>
Date: Wed, 11 Mar 2026 20:27:36 +0100
Subject: [PATCH] debug orgmember permission issues

---
 apps/api/src/middlewares/org-member.ts           | 4 +++-
 apps/api/src/routes/organization/organization.ts | 4 ++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/apps/api/src/middlewares/org-member.ts b/apps/api/src/middlewares/org-member.ts
index bb4dc28b..765ad8f0 100644
--- a/apps/api/src/middlewares/org-member.ts
+++ b/apps/api/src/middlewares/org-member.ts
@@ -11,6 +11,7 @@ import { getUserOrgRole } from '@cio/db/queries/organization';
 export const orgMemberMiddleware = async (c: Context, next: Next) => {
   try {
     const user = c.get('user');
+    console.log('orgMemberMiddleware user', user);
     if (!user) {
       return c.json(
         {
@@ -23,7 +24,7 @@ export const orgMemberMiddleware = async (c: Context, next: Next) => {
     }
 
     const orgId = c.req.header('cio-org-id');
-
+    console.log('orgMemberMiddleware orgId', orgId);
     if (!orgId) {
       return c.json(
         {
@@ -36,6 +37,7 @@ export const orgMemberMiddleware = async (c: Context, next: Next) => {
     }
 
     const roleId = await getUserOrgRole(orgId, user.id);
+    console.log('orgMemberMiddleware roleId', orgId);
     if (roleId === null) {
       return c.json(
         {
diff --git a/apps/api/src/routes/organization/organization.ts b/apps/api/src/routes/organization/organization.ts
index a27cf1ab..1a468092 100644
--- a/apps/api/src/routes/organization/organization.ts
+++ b/apps/api/src/routes/organization/organization.ts
@@ -311,6 +311,10 @@ export const organizationRouter = new Hono()
           .map((value) => value.trim())
           .filter(Boolean);
 
+        console.log('user', user);
+        console.log('userRole', userRole);
+        console.log('orgId', orgId);
+        console.log('tagSlugs', tagSlugs);
         const result = await getOrganizationCourses(
           orgId,
           user.id,