Project-level "Debug Files Access" override ineffective when org-level "Debug Files Access" is more restrictive

Environment

SaaS (https://sentry.io/)

Steps to Reproduce

Setting "Debug Files Access" to a less restrictive role at the project level has no effect. The org-level restriction always takes precedence despite the project-level setting claiming to override it.

Confirmed combinations:

• Org: Owner / Project: Manager → Manager accounts cannot download debug files
• Org: Manager / Project: Member → Member accounts cannot download debug files

1. Set org-level Attachments Access to, for example, Manager or Admin :

2. Navigate to a project's settings (Settings > <project> > Project Settings)

3. Under Membership, set Debug Files Access to Member

4. Log in as a user with the Member role

5. Attempt to download a debug file (e.g., source map or proguard mapping) from the project

Expected Result

The project-level setting overrides the org-level setting. Member accounts can download debug files for the project where the override is configured.

Actual Result

Member accounts cannot download debug files. The org-level Manager restriction appears to remain in effect despite the project-level override.

Product Area

Unknown

Link

No response

DSN

No response

Version

No response

Start by tracing the organization- and project-level Debug Files Access checks used when downloading source maps or ProGuard mappings. Reproduce the Owner/Manager and Manager/Member combinations from the issue, then verify that a project-level setting can override the organization restriction for that project.