ruanwenjun opened a new issue, #18559: URL: https://github.com/apache/dolphinscheduler/issues/18559
### Search before asking - [x] I had searched in the issues and found no similar issues. ### What happened Project-scoped workflow execution and mutation APIs do not consistently use the existing project write-permission check. This causes inconsistent permission handling across related project operations. ### What you expected to happen Project-scoped execution and mutation APIs should consistently require project write permission, while read APIs should retain their existing behavior. ### How to reproduce Compare the project permission checks used by related workflow execution and mutation service methods with the existing project write-permission guard. ### Anything else The affected operations should also validate that the target object belongs to the project supplied by the request. ### Version dev ### Are you willing to submit PR? - [x] Yes I am willing to submit a PR! ### Code of Conduct - [x] I agree to follow this projects Code of Conduct. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
