permission on action in workflow
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 6.5k
- Forks
- 787
- PR merge metrics
- No merged PRs in 30d
Description
I have two packs A and B.
There is an action in A called A.a.
There is a workflow in B called B.wf.
Action A.a is a task in B.wf with given parameter value.
When I give the user permission "action_execute" on B.wf, and don't give the user permission "action_execute" on A.a, then it raises an error "User "xxx" doesn't have required permission "action_execute" on resource "action:A:a"" when running B.wf.
So what should I do if I only want to give the user permission on B.wf ?
Because I don't want to give the user the permission "action_execute" on A.a, I only want to give the user the permission "action_execute" on A.a with given parameter value.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named. Start by tracing how action_execute permissions are checked when a workflow invokes an action, then determine whether parameter-scoped permission is supported or needs a design decision; done means documenting or implementing an agreed permission model with coverage for the A.a-in-B.wf case.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authorization
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100