StackStorm / StackStorm/st2

Provide parent rbac object in subworkflow context

Open
#4,823 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

RBAC stale workflows: orquesta
Dominant language
Python
Stars
6.5k
Forks
787
PR merge metrics
No merged PRs in 30d

Description

When calling a subworkflow, the rbac object is not passed to the subworkflow. We need that object to check permissions in subworkflow. It is of course, available in the ctx() object in the parent. The object i would like propagated is like so:

{
"rbac": {
"user": "admin",
"roles": [
"admin",
"observer",
"system_admin"
]
}
}

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No file or test is named. Start by tracing how a parent workflow invokes a subworkflow and how the parent ctx() object is propagated; confirm the existing RBAC shape and its permission checks. Done means the subworkflow can access the parent rbac object with the user and roles shown, with coverage for the propagation behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authorization, backend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.