Skip to content

Commit 0121c3d

Browse files
fregataaclaude
andcommitted
refactor: exclude search actions from RBAC validator application
Search actions are excluded from RBAC validator scope per BA-2946. Search results are already filtered by scope through the existing SearchScope mechanism. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 0519830 commit 0121c3d

1 file changed

Lines changed: 2 additions & 6 deletions

File tree

src/ai/backend/manager/services/group/processors.py

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -80,14 +80,10 @@ def __init__(
8080
self.usage_per_period = ActionProcessor(group_service.usage_per_period, action_monitors)
8181
self.search_projects = ActionProcessor(group_service.search_projects, action_monitors)
8282
self.search_projects_by_domain = ScopeActionProcessor(
83-
group_service.search_projects_by_domain,
84-
action_monitors,
85-
validators=[validators.rbac.scope],
83+
group_service.search_projects_by_domain, action_monitors
8684
)
8785
self.search_projects_by_user = ScopeActionProcessor(
88-
group_service.search_projects_by_user,
89-
action_monitors,
90-
validators=[validators.rbac.scope],
86+
group_service.search_projects_by_user, action_monitors
9187
)
9288
self.get_project = SingleEntityActionProcessor(
9389
group_service.get_project, action_monitors, validators=[validators.rbac.single_entity]

0 commit comments

Comments
 (0)