fix: record the validated address on the job row, not the one handed in

This commit is contained in:
Ruben Fiszel
2026-08-04 09:54:41 +00:00
parent 18fa197f6d
commit b7c3f66610
2 changed files with 8 additions and 4 deletions
+5 -1
View File
@@ -6749,7 +6749,11 @@ async fn push_inner<'c, 'd>(
language as Option<ScriptLang>,
same_worker,
pre_run_error.map(|e| e.to_string()),
email,
// `job_authed`'s, not the caller's: that one came through
// `fetch_authed_from_permissioned_as`, which re-resolves the address from the principal's
// live binding. The same statement writes it to `job_perms.email`, and the two columns
// naming different accounts is the state this is here to prevent.
job_authed.email,
visible_to_owner,
flow_innermost_root_job,
guarded_concurrent_limit,