>_
.issue.db
/highway
Dashboard
Issues
Memory
Lessons
Audit Log
New Issue
Edit Issue #1013
Update issue details
Title *
Description
EARS: The worker list and worker control endpoints shall be available only to platform admins (require_platform_permission). Tenant users shall get 403. EVIDENCE (live, 2026-10-20 02:51Z, tenant test, https://highway.rodmena.co.uk): GET /api/v1/workers -> 200 with 13 workers on highway_activity/highway_default/highway_internal (worker ids, machine_id, tags). POST /api/v1/workers/t1005-no-such-worker/pause -> 404 WORKER_NOT_FOUND, so a tenant passes RBAC and reaches the handler (no real worker was touched). STATIC: api/blueprints/v1/workers_control.py PUT capacity, pause, resume, drain, DELETE, cleanup use only require_permission('manage_workflows'), a tenant permission, and call pause_worker()/... on the shared worker_registry. A tenant admin can therefore pause or drain every platform worker (cross-tenant outage). Raised from the #978 question during #1005.
Priority
Low
Medium
High
Critical
Status
Open
In Progress
Closed
Won't Do
Due Date (YYYY-MM-DD)
Tags (comma separated)
Related Issues (IDs)
Enter IDs of issues related to this one. They will be linked as 'related'.
Update Issue
Cancel