GareArc 8482167f1c fix(agent): authorize workflow-only agents against their parent workflow app ...

The RBAC resource resolver returned the hidden runtime backing app for
workflow-only agents, which never receives a resource access policy, so
per-resource overrides on the parent workflow app were ignored. Resolve
agent_id to the policy-owning agent.app_id instead and keep
backing_app_id strictly runtime-only.

2026-07-22 21:31:43 -07:00

..

agent_app_parameters.py

refactor: explicit DB session propagation across backend paths (#38559)

2026-07-15 06:48:28 +00:00

app_access.py

refactor: explicit DB session propagation across backend paths (#38559)

2026-07-15 06:48:28 +00:00

controller_schemas.py

docs: enrich generated service API descriptions (#37615)

2026-06-18 08:43:39 +00:00

errors.py

fix: validate conversation variable description length to prevent varchar(255) truncation error (#33038)

2026-06-10 07:28:12 +00:00

fields.py

refactor(api): migrate workspace model endpoints to BaseModel (#37963)

2026-07-09 04:05:32 +00:00

file_response.py

chore: normalize frozenset literals and myscale typing (#34327)

2026-03-31 08:21:22 +00:00

helpers.py

fix(api): preserve remote file URL query params (#36478)

2026-05-22 01:45:20 +00:00

human_input.py

docs: enrich generated service API descriptions (#37615)

2026-06-18 08:43:39 +00:00

schema.py

fix: GET query parameter OpenAPI contracts (#37378)

2026-06-12 09:01:22 +00:00

session.py

refactor: explicit DB session propagation across backend paths (#38559)

2026-07-15 06:48:28 +00:00

wraps.py

fix(agent): authorize workflow-only agents against their parent workflow app

2026-07-22 21:31:43 -07:00