ruanwenjun opened a new pull request, #18561: URL: https://github.com/apache/dolphinscheduler/pull/18561
## Was this PR generated or assisted by AI? YES. The implementation and tests were assisted by AI and reviewed locally. ## Purpose of the pull request Make project-scoped workflow execution and mutation APIs consistently require project write permission. Related service methods currently use inconsistent project permission guards, and some mutations do not verify that the target object belongs to the project supplied by the request. Read APIs keep their existing behavior. Closes #18559. ## Brief change log - Reuse the existing project write-permission check for workflow, task, instance, and scheduler mutations. - Validate target project ownership for affected resource operations. - Add focused regression tests for project permission handling. ## Verify this pull request This change added tests and can be verified as follows: - `./mvnw -pl dolphinscheduler-api -Dtest=ProjectServiceTest,ExecutorServiceTest,WorkflowDefinitionServiceTest,TaskDefinitionServiceImplTest,WorkflowInstanceServiceTest,TaskInstanceServiceTest,SchedulerServiceTest -Dsurefire.failIfNoSpecifiedTests=false test` - 112 tests passed with no failures or errors. - `git diff --check` ## Pull Request Notice [Pull Request Notice](https://github.com/apache/dolphinscheduler/blob/dev/docs/docs/en/contribute/join/pull-request.md) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
