feat: enforce explicit Subject permissions and delegated Worker grants

2026-10-20 06:22:58 +09:00
parent a774925dec
commit b135fa5e99
52 changed files with 7422 additions and 100 deletions
@@ -908,6 +908,7 @@ mod tests {
            workdir_attachments: Vec::new(),
            feature_connections: Default::default(),
            control_operation_id: None,
+            execution_grant: None,
        };

        let response = create_backend_worker_with_client(&target, &create, &api)
@@ -567,6 +567,7 @@ impl BackendWorkspaceProductClient {
            workdir_attachments: Vec::new(),
            feature_connections: Default::default(),
            control_operation_id: None,
+            execution_grant: None,
        };
        let workspace_id = self.workspace_id.clone();
        let response: BrowserCreateWorkerResponse = self.generated(move |client| async move {