rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Relocate agent-run authorization to its package

Browse Source 
The agent-run actions and policies lived in the core probo policy set,
which forced every authorization change for the agent-run domain to
touch unrelated core files. Move the actions and the OWNER/ADMIN and
VIEWER/AUDITOR policies into the agentrun package and have it expose a
PolicySet that probod registers into the authorizer at composition
time, so the rules live alongside the domain logic they govern.

Signed-off-by: Bryan Frimin <bryan@probo.com>
This commit is contained in:
Bryan Frimin
2026-06-08 14:50:23 +02:00
parent f5a73c7be1
commit 98a8d90391
7 changed files with 84 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
pkg/probod/probod.go
View File

@@ -595,6 +595,7 @@ func (impl *Implm) Run(
)
agentRunService := agentrun.NewService(pgClient)
iamService.Authorizer.RegisterPolicySet(agentrun.PolicySet())
thirdPartyService := thirdparty.NewService(pgClient, fileService, thirdPartyVetter)
riskManagementService := riskmanagement.NewService(pgClient)