Remove claims cache before updating the organization.

modules/identity/src/Volo.Abp.Identity.Domain/Volo/Abp/Identity/IdentityUserManager.cs

@@ -174,6 +174,8 @@ public class IdentityUserManager : UserManager<IdentityUser>, IDomainService
         var user = await UserRepository.GetAsync(userId, cancellationToken: CancellationToken);
         user.RemoveOrganizationUnit(ouId);
         await UserRepository.UpdateAsync(user, cancellationToken: CancellationToken);
+
+        await DynamicClaimCache.RemoveAsync(AbpDynamicClaimCacheItem.CalculateCacheKey(user.Id, user.TenantId), token: CancellationToken);
     }
 
     public virtual async Task RemoveFromOrganizationUnitAsync(IdentityUser user, OrganizationUnit ou)

modules/identity/src/Volo.Abp.Identity.Domain/Volo/Abp/Identity/OrganizationUnitManager.cs

@@ -200,9 +200,9 @@ public class OrganizationUnitManager : DomainService
 
     public virtual async Task RemoveRoleFromOrganizationUnitAsync(IdentityRole role, OrganizationUnit organizationUnit)
     {
+        await RemoveDynamicClaimCacheAsync(organizationUnit);
         organizationUnit.RemoveRole(role.Id);
         await OrganizationUnitRepository.UpdateAsync(organizationUnit);
-        await RemoveDynamicClaimCacheAsync(organizationUnit);
     }
 
     protected virtual async Task RemoveDynamicClaimCacheAsync(OrganizationUnit organizationUnit)