starred/windmill
1
0
Fork 0
mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-28 16:02:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: keep restricted jobs off flow runners, preserve scopes on rename and promotion

Browse Source 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Ruben Fiszel
2026-10-02 17:55:03 +02:00
co-authored by Claude Opus 5.5
parent 7646cb3281
commit 2ca3f56140
14 changed files with 654 additions and 79 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cli/windmill-utils-internal/src/deploy.ts
+5
View File
@@ -458,6 +458,8 @@ export async function deployItem(
path,
requestBody: {
...flow,
// Sent even when unset: the backend keeps a restriction an omitted field leaves out.
job_token_scopes: flow.job_token_scopes ?? null,
preserve_on_behalf_of: preserveOnBehalfOf,
on_behalf_of_email: onBehalfOf,
// Usernames are per-workspace, so the source's principal names nobody in
@@ -471,6 +473,8 @@ export async function deployItem(
workspace: workspaceTo,
requestBody: {
...flow,
// Sent even when unset: the backend keeps a restriction an omitted field leaves out.
job_token_scopes: flow.job_token_scopes ?? null,
preserve_on_behalf_of: preserveOnBehalfOf,
on_behalf_of_email: onBehalfOf,
// Usernames are per-workspace, so the source's principal names nobody in
@@ -498,6 +502,7 @@ export async function deployItem(
requestBody: {
...script,
lock: script.lock,
job_token_scopes: script.job_token_scopes ?? null,
parent_hash: parentHash,
preserve_on_behalf_of: preserveOnBehalfOf,
on_behalf_of_email: onBehalfOf,