R01 · 🔴 High · compliance

Unsubscribe notice is fire-and-forget on customer deletion

What the code does

The POST to users_unsubscribe_send has no .then/.catch; if it fails the customer is deleted but never notified.

Where

app/controllers/crm/users/index.js

Suggested fix

Suggestion

Await the request and surface a warning when it fails, or move the notification server-side into the delete.

Affected features