ruanwenjun commented on PR #18597:
URL:
https://github.com/apache/dolphinscheduler/pull/18597#issuecomment-5450040116
@SbloodyS Thanks for the comment. After reconsidering the scope, I removed
the execution-time completeness check from this PR.
This PR is limited to permission enforcement when a sub-workflow reference
is created, changed, or activated. The user must have write permission for the
project that owns the referenced sub-workflow. Once the reference has been
validly
bound, execution does not recheck the executor's direct permission on the
referenced project.
If the referenced sub-workflow later becomes unavailable, it remains a
runtime dependency failure, consistent with other missing task dependencies
such as data sources, rather than an authorization failure. Therefore, the
existing execution behavior is intentionally unchanged.
I have updated the PR/issue title.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
