Luke Tornquist 9eb5e07d1b fix(workflow): deny banned owners at every run-creation door ...

The webhook handler checked the owner's ban itself, so cron and
event-triggered workflows of a banned owner still created runs. Bans
leave channel membership in place, so the shared SEC-006 owner authority
gate passed them.

Move the restriction read into WorkflowEngine::check_owner_authority,
which the webhook, event, cron and signed-trigger doors all call before
creating a run. A lookup failure still denies. The handler-local branch
goes away; the webhook keeps its generic 404.

Co-authored-by: Elrond <28d6302a099e5225b02c4155ac4236e4912603df2ab08dbfc2f4fef08ce598c8@buzz.block.builderlab.xyz>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Luke Tornquist <tornquist@squareup.com>

2026-10-26 14:05:51 -04:00

..

src

fix(workflow): deny banned owners at every run-creation door

2026-10-26 14:05:51 -04:00

Cargo.toml

feat(deletion): add durable whole-community deletion (#4425)

2026-08-12 09:25:58 -07:00