You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@dolphinscheduler.apache.org by "ruanwenjun (via GitHub)" <gi...@apache.org> on 2026/08/28 08:05:47 UTC

Re: [PR] [Fix-18596][API] Enforce permission checks for sub-workflow references [dolphinscheduler]

ruanwenjun commented on PR #18597:
URL: https://github.com/apache/dolphinscheduler/pull/18597#issuecomment-5450040116

   @SbloodyS Thanks for the comment. After reconsidering the scope, I removed the execution-time completeness check from this PR.
   
   This PR is limited to permission enforcement when a sub-workflow reference is created, changed, or activated. The user must have write permission for the project that owns the referenced sub-workflow. Once the reference has been validly
    bound, execution does not recheck the executor's direct permission on the referenced project.
   
   If the referenced sub-workflow later becomes unavailable, it remains a runtime dependency failure, consistent with other missing task dependencies such as data sources, rather than an authorization failure. Therefore, the existing execution behavior is intentionally unchanged. 
   
   I have updated the PR/issue  title.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org