zyc/AirGate
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: rebuild Deny policy on account restore

Browse Source 
Deny policy (AirGate_Deny_{username}) was removed during disable
but not recreated on restore. Now _update_deny_policy is called
during restore to rebuild project isolation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
seaislee1209 2026-03-28 22:15:19 +08:00
parent 413977361a
commit 4e62f3f32e
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
backend/apps/monitor/views.py
View File

@ -645,6 +645,9 @@ def iam_user_enable_view(request, pk):
except VolcengineAPIError as restore_err: except VolcengineAPIError as restore_err:
restore_errors.append(f"{p['name']}: {restore_err}") restore_errors.append(f"{p['name']}: {restore_err}")
# 3. 重建 Deny 策略（项目隔离）
_update_deny_policy(user)
user.status = IAMUser.Status.ACTIVE user.status = IAMUser.Status.ACTIVE
user.saved_policies_on_disable = [] user.saved_policies_on_disable = []
user.volc_login_allowed = restore_login user.volc_login_allowed = restore_login