[PM 34174]Do not show renewal reminder banners to exempt organizations

[cyprain-okeke]

🎟️ Tracking

https://bitwarden.atlassian.net/browse/PM-34174

📔 Objective

Suppress billing renewal reminder banners and subscription status callouts for organizations that are exempt from billing
automation.

Reseller-managed organizations marked as exempt (exemptFromBillingAutomation = true) should not see renewal cycle notifications or
warning callouts related to past due, unpaid, pending cancellation, or canceled subscription statuses.

Changes

• Added exemptFromBillingAutomation field to the organization model pipeline (ProfileOrganizationResponse → OrganizationData →
  Organization)
• Gated getResellerRenewalWarning$() in OrganizationWarningsService to return null for exempt organizations, skipping the API call
  entirely
• Added exempt input to SubscriptionStatusComponent to suppress warning callouts (past_due, unpaid, pending_cancellation, canceled)
  while preserving status and date display
• Passed userOrg.exemptFromBillingAutomation to the SubscriptionStatusComponent from the cloud subscription template

Screenshots & Testing
Testing

• Verified exempt organizations do not see reseller renewal banners
• Verified exempt organizations do not see subscription status callouts
• Verified non-exempt organizations continue to see all warnings as before
• Unit tests added for both OrganizationWarningsService and SubscriptionStatusComponent

📸 Screenshots

[github-actions]

Checkmarx One – Scan Summary & Details – 1e9c3966-f606-4847-a10f-9162689760d6

---

New Issues (2)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		CSRF	src/Api/Vault/Controllers/CiphersController.cs: 1558	details Method at line 1558 of /src/Api/Vault/Controllers/CiphersController.cs gets a parameter from a user request from id. This parameter value flows ... Attack Vector
2		CSRF	src/Api/Vault/Controllers/CiphersController.cs: 1385	details Method at line 1385 of /src/Api/Vault/Controllers/CiphersController.cs gets a parameter from a user request from id. This parameter value flows ... Attack Vector

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.61%. Comparing base (2820ecc) to head (b329e2a).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7483      +/-   ##
==========================================
+ Coverage   59.14%   63.61%   +4.47%     
==========================================
  Files        2077     2077              
  Lines       91859    91865       +6     
  Branches     8177     8177              
==========================================
+ Hits        54326    58440    +4114     
+ Misses      35601    31407    -4194     
- Partials     1932     2018      +86     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
88.1% Duplication on New Code

See analysis details on SonarQube Cloud