Improve the frontend and repository layer

services/tenant/app/repositories/tenant_member_repository.py

@@ -13,6 +13,7 @@ import json
 from .base import TenantBaseRepository
 from app.models.tenants import TenantMember
 from shared.database.exceptions import DatabaseError, ValidationError, DuplicateRecordError
+from shared.config.base import is_internal_service
 
 logger = structlog.get_logger()
 
@@ -89,6 +90,25 @@ class TenantMemberRepository(TenantBaseRepository):
     async def get_membership(self, tenant_id: str, user_id: str) -> Optional[TenantMember]:
         """Get specific membership by tenant and user"""
         try:
+            # Validate that user_id is a proper UUID format for actual users
+            # Service names like 'inventory-service' should be handled differently
+            import uuid
+            try:
+                uuid.UUID(user_id)
+                is_valid_uuid = True
+            except ValueError:
+                is_valid_uuid = False
+
+            # For internal service access, return None to indicate no user membership
+            # Service access should be handled at the API layer
+            if not is_valid_uuid and is_internal_service(user_id):
+                # This is an internal service request, return None
+                # Service access is granted at the API endpoint level
+                logger.debug("Internal service detected in membership lookup",
+                            service=user_id,
+                            tenant_id=tenant_id)
+                return None
+
             memberships = await self.get_multi(
                 filters={
                     "tenant_id": tenant_id,
@@ -444,4 +464,4 @@ class TenantMemberRepository(TenantBaseRepository):
         except Exception as e:
             logger.error("Failed to cleanup inactive memberships",
                         error=str(e))
-            raise DatabaseError(f"Cleanup failed: {str(e)}")
+            raise DatabaseError(f"Cleanup failed: {str(e)}")