Skip to content

PAM Workflow changes and improvements#2019

Open
amangalampalli-ks wants to merge 6 commits intofix/pam-workflow-changesfrom
fix/pam-workflow-changes-int
Open

PAM Workflow changes and improvements#2019
amangalampalli-ks wants to merge 6 commits intofix/pam-workflow-changesfrom
fix/pam-workflow-changes-int

Conversation

@amangalampalli-ks
Copy link
Copy Markdown
Contributor

PAM Workflow fixes and improvements

Summary

  • Record type validation on pam workflow create and pam workflow request — rejects unsupported types (e.g. pamUser) upfront instead of failing at pam launch
  • Exemption rework — record owners and approvers are now correctly exempt, replacing the old enforcement-based check
  • Stage display fixpam w my-access correctly shows "Waiting" for time/approval conditions vs "Ready to Start" for user-action conditions (MFA, reason, ticket)
  • Base64url UID fix — UIDs starting with - no longer break argparse across approve, deny, start, end commands
  • MFA prompt — clear guidance when no 2FA methods are configured
  • CLI cleanuppam w state uses positional arg, removed --timezone flag, cleaner my-access table output

@amangalampalli-ks amangalampalli-ks self-assigned this May 6, 2026
@amangalampalli-ks amangalampalli-ks marked this pull request as ready for review May 6, 2026 12:20
print(f"Type: Escalation approver{esc_info}")
print()

except CommandError:
Copy link
Copy Markdown
Contributor

@pvagare-ks pvagare-ks May 7, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

raise exceptions for KeyboardInterrupt/SystemExit also

print()

except CommandError:
raise
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

raise exceptions for KeyboardInterrupt/SystemExit also

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants