Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

自定义权限申请审批单流转到不到业务的分级管理员 #2709

Open
Shutulee opened this issue Jun 12, 2024 · 0 comments
Open
Assignees
Labels
Bugfix Something isn't working

Comments

@Shutulee
Copy link
Collaborator

Shutulee commented Jun 12, 2024

BUG反馈还是需求提交(Is this a BUG REPORT or FEATURE REQUEST)? (choose one):
Bug

bk-iam-saas SaaS版本/bk-iam后台版本(The versions used):
上云SaaS

发生了什么(What happened):
业务在自定义申请DBM权限时,发现审批单总是流转到系统管理员。
经排查,系统管理员曾创建过一个管理空间,且空间下的授权边界的资源实例为无限制。
问题在于,当两个管理空间下的授权边界均能命中某资源时,该资源的申请单仅流转到了系统管理员创建的空间下,而没有流转到业务的管理空间。

期望是什么(What you expected to happen):
当平台配置为「自定义权限走分级管理员审批」时,实际单据的流转应该与用户期望一致。

如何复现(How to reproduce it):
申请自定义权限——查看流转工单

相关的日志详情(SaaS 及后台日志说明)和截图等(Log & Screenshot):
IAM审批配置与ITSM流程配置已排查,暂时无问题。需要排查后台接口的返回值是否出错
IAM:
image
ITSM:
image

备注(Anything else we need to know):
当前自定义权限的申请单,会基于对应管理空间的授权边界是否包含该资源,流转到对应空间的分级管理员。若两个空间同时命中,则会取并集。

@Shutulee Shutulee added the Bugfix Something isn't working label Jun 12, 2024
@Shutulee Shutulee changed the title 自定义权限申请审批单总是流转到系统管理员 自定义权限申请审批单流转到不到业务的分级管理员 Aug 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bugfix Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants