seaislee1209 d7b40beff7 fix: Volcengine API does not support project-level policy scope ...

AttachUserPolicy ignores Scope=Project parameter - policies always
attach globally. Project isolation now relies entirely on Deny policy
(AirGate_Deny_{username}) which blocks access to non-whitelisted projects.

Updated report with this finding.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-28 23:21:08 +08:00

..

__init__.py

feat: initialize AirGate - Volcengine IAM sub-account management platform

2026-03-19 13:03:30 +08:00

ark_service.py

feat: add Ark API Key management (list/create/toggle/delete)

2026-03-20 21:36:13 +08:00

billing_service.py

feat: initialize AirGate - Volcengine IAM sub-account management platform

2026-03-19 13:03:30 +08:00

crypto.py

feat: initialize AirGate - Volcengine IAM sub-account management platform

2026-03-19 13:03:30 +08:00

feishu.py

feat: initialize AirGate - Volcengine IAM sub-account management platform

2026-03-19 13:03:30 +08:00

iam_service.py

fix: Volcengine API does not support project-level policy scope

2026-03-28 23:21:08 +08:00

scheduler.py

feat: multi-project per sub-account support

2026-03-19 20:37:38 +08:00

volcengine_client.py

feat: add Ark API Key management (list/create/toggle/delete)

2026-03-20 21:36:13 +08:00