Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(Approval Workflows): Workflows keep approval history after deletion #2834

Conversation

McPizza0
Copy link
Contributor

@McPizza0 McPizza0 commented Dec 3, 2024

Description 📣

Before:
When you delete an approval workflow, all related requests were also deleted. This can be an issue for auditing and logging purposes

Before.mp4

Now:
When you delete a workflow; the following happens:

  • workflow has a deletedAt date set
  • all open Secret and Access requests are closed
  • any previously generated additionalUserPrivileges are deleted

Type ✨

  • Bug fix
  • New feature
  • Improvement
  • Breaking change
  • Documentation

Tests 🛠️

Tested manually as per videos above

@McPizza0 McPizza0 marked this pull request as ready for review December 3, 2024 22:09
@McPizza0 McPizza0 force-pushed the omar/eng-1555-deleting-approval-change-policy-deletes-previous-requests branch from e00628d to 27721cf Compare December 6, 2024 11:24
@McPizza0 McPizza0 changed the title fix(Approval Workflows): Workflows are now disabled instead of deleted - keeps request items fix(Approval Workflows): Workflows keep approval history after deletion Dec 6, 2024
Copy link
Contributor

@DanielHougaard DanielHougaard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left a few comments, testing on my end now

@DanielHougaard
Copy link
Contributor

When an access request policy is deleted, existing access requests remain active.

I think we should be deleting additional privileges associated to requests that are owned by the policy that gets deleted.

@McPizza0
Copy link
Contributor Author

McPizza0 commented Dec 9, 2024

When an access request policy is deleted, existing access requests remain active.

I think we should be deleting additional privileges associated to requests that are owned by the policy that gets deleted.

we do this in deleteAccessApprovalPolicy

Copy link
Contributor

@DanielHougaard DanielHougaard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved, lets thoroughly test this in Gamma

@McPizza0 McPizza0 merged commit 97f85fa into main Dec 9, 2024
6 of 7 checks passed
@McPizza0 McPizza0 deleted the omar/eng-1555-deleting-approval-change-policy-deletes-previous-requests branch December 9, 2024 19:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants