Skip to content

fix: org owned objects with access via api token, return error, confi… - #2441

Merged
golanglemonade merged 2 commits into
mainfrom
feat-scope-error
May 29, 2026
Merged

fix: org owned objects with access via api token, return error, confi…#2441
golanglemonade merged 2 commits into
mainfrom
feat-scope-error

Conversation

@golanglemonade

Copy link
Copy Markdown
Member
  • fixes a bug where org owned objects (e.g. not object owned) were still returned even if the api token didn't have the scope
  • now returns an error instead of empty results if the token doesn't have all scopes required for the request, info log logged with object type + token id for debugging
  • pulls in iam v0.32.0 to update default config for module file
  • removes authentik db creation from main setup, moves to it's own init script; removes windmill db as its not used

…g update

Signed-off-by: Sarah Funkhouser <147884153+golanglemonade@users.noreply.github.com>
Signed-off-by: Sarah Funkhouser <147884153+golanglemonade@users.noreply.github.com>
@golanglemonade
golanglemonade enabled auto-merge (squash) May 29, 2026 18:22
@theopenlane-bender

Copy link
Copy Markdown

🔧 Configuration Changes Detected

This PR contains changes that will affect the Helm chart configuration. A draft infrastructure PR has been automatically created to preview these changes:

📋 Draft PR: https://github.com/theopenlane/openlane-infra/pull/960

Changes Preview:

  • 🔄 Merged Helm values.yaml
  • 🔐 External secrets configuration updated

The draft infrastructure PR will be closed automatically after this core PR is merged.

@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
16.7% Coverage on New Code (required ≥ 20%)

See analysis details on SonarQube Cloud

@golanglemonade
golanglemonade merged commit 7f74af7 into main May 29, 2026
23 of 24 checks passed
@golanglemonade
golanglemonade deleted the feat-scope-error branch May 29, 2026 19:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants