OpenMetadata/openmetadata-spec/src
Sriharsha Chintalapani b62db6224f
feat(tasks): policy-driven authorization with self-approval guard (#28315)
* feat(tasks): policy-driven authorization with self-approval guard

Moves Task resolve/close/reassign authorization from ~150 lines of custom
Java in TaskRepository into the policy engine. Adds ResolveTask, CloseTask,
ReassignTask MetadataOperation values, isTaskFiler/isTaskAssignee/isTaskReviewer
SpEL conditions, and a new TaskAuthorPolicy seed. Closes the self-approval
gap where a filer who was also in the assignees list could approve their
own task (now denied via deny rule). TaskResourceContext.getOwners now
returns target entity owners so isOwner() retains its conventional meaning;
v200 migration backfills the new policy attachment on the DataConsumer role
for upgrades.
2026-05-21 22:20:46 -07:00
..
main feat(tasks): policy-driven authorization with self-approval guard (#28315) 2026-05-21 22:20:46 -07:00
test/resources/json Fix #7469: Refactor OpenMetadata code modules (#7474) 2022-09-14 23:14:02 -07:00