From 4e62f3f32ebe42216f32982b66fbe68387a69c32 Mon Sep 17 00:00:00 2001 From: seaislee1209 Date: Sat, 28 Mar 2026 22:15:19 +0800 Subject: [PATCH] fix: rebuild Deny policy on account restore Deny policy (AirGate_Deny_{username}) was removed during disable but not recreated on restore. Now _update_deny_policy is called during restore to rebuild project isolation. Co-Authored-By: Claude Opus 4.6 (1M context) --- backend/apps/monitor/views.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/backend/apps/monitor/views.py b/backend/apps/monitor/views.py index 54e337b..feeb4c8 100644 --- a/backend/apps/monitor/views.py +++ b/backend/apps/monitor/views.py @@ -645,6 +645,9 @@ def iam_user_enable_view(request, pk): except VolcengineAPIError as restore_err: restore_errors.append(f"{p['name']}: {restore_err}") + # 3. 重建 Deny 策略（项目隔离） + _update_deny_policy(user) + user.status = IAMUser.Status.ACTIVE user.saved_policies_on_disable = [] user.volc_login_allowed = restore_login