apiVersion: jenkins.io/v1
kind: PipelineActivity
metadata:
  annotations:
    lighthouse.jenkins-x.io/cloneURI: https://github.com/greencapitaltrade/bifrost.git
    lighthouse.jenkins-x.io/job: release
    pipeline.jenkins-x.io/traceID: e1204c817b5e43953faf418a78cee714
  creationTimestamp: "2026-09-10T06:28:39Z"
  generation: 7
  labels:
    branch: main
    build: "237"
    context: release
    created-by-lighthouse: "true"
    event-GUID: d80f7536-ace0-11f1-94a0-3e26bc8367a9
    lighthouse.jenkins-x.io/baseSHA: 0695cc3c83403f2627ff02a65407d0106790da38
    lighthouse.jenkins-x.io/branch: main
    lighthouse.jenkins-x.io/buildNum: "1789021719284"
    lighthouse.jenkins-x.io/context: release
    lighthouse.jenkins-x.io/id: apitaltrade-bifrost-main-release-cmdjv
    lighthouse.jenkins-x.io/job: release
    lighthouse.jenkins-x.io/lastCommitSHA: 0695cc3c83403f2627ff02a65407d0106790da38
    lighthouse.jenkins-x.io/refs.org: greencapitaltrade
    lighthouse.jenkins-x.io/refs.repo: bifrost
    lighthouse.jenkins-x.io/type: postsubmit
    owner: greencapitaltrade
    podName: apitaltrade-bifrost-main-release-qwwkw-from-build-pack-pod
    provider: github
    repository: bifrost
    tekton.dev/pipeline: apitaltrade-bifrost-main-release
  managedFields:
  - apiVersion: jenkins.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:labels:
          f:branch: {}
          f:context: {}
          f:owner: {}
          f:provider: {}
          f:repository: {}
      f:spec:
        f:lastCommitMessage: {}
        f:lastCommitSHA: {}
        f:releaseNotesURL: {}
        f:version: {}
    manager: jx-changelog-0.10.29
    operation: Update
    time: "2026-09-10T06:32:05Z"
  - apiVersion: jenkins.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        f:completedTimestamp: {}
        f:status: {}
    manager: jx-promote-0.6.45
    operation: Update
    time: "2026-09-10T06:33:15Z"
  - apiVersion: jenkins.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:lighthouse.jenkins-x.io/cloneURI: {}
          f:lighthouse.jenkins-x.io/job: {}
          f:pipeline.jenkins-x.io/traceID: {}
        f:labels:
          .: {}
          f:build: {}
          f:created-by-lighthouse: {}
          f:event-GUID: {}
          f:lighthouse.jenkins-x.io/baseSHA: {}
          f:lighthouse.jenkins-x.io/branch: {}
          f:lighthouse.jenkins-x.io/buildNum: {}
          f:lighthouse.jenkins-x.io/context: {}
          f:lighthouse.jenkins-x.io/id: {}
          f:lighthouse.jenkins-x.io/job: {}
          f:lighthouse.jenkins-x.io/lastCommitSHA: {}
          f:lighthouse.jenkins-x.io/refs.org: {}
          f:lighthouse.jenkins-x.io/refs.repo: {}
          f:lighthouse.jenkins-x.io/type: {}
          f:podName: {}
          f:tekton.dev/pipeline: {}
      f:spec:
        .: {}
        f:baseSHA: {}
        f:batchPipelineActivity: {}
        f:build: {}
        f:buildLogsUrl: {}
        f:context: {}
        f:gitBranch: {}
        f:gitOwner: {}
        f:gitRepository: {}
        f:gitUrl: {}
        f:message: {}
        f:pipeline: {}
        f:startedTimestamp: {}
        f:steps: {}
    manager: jx-build-controller
    operation: Update
    time: "2026-09-10T06:34:05Z"
  name: greencapitaltrade-bifrost-main-237
  namespace: jx
  resourceVersion: "337595283"
  uid: a1279153-6226-47a8-80d7-bc3e1be4215d
spec:
  baseSHA: 0695cc3c83403f2627ff02a65407d0106790da38
  batchPipelineActivity: {}
  build: "237"
  buildLogsUrl: s3://logs-gct-prod-20260425045301534100000007/jenkins-x/logs/greencapitaltrade/bifrost/main/237.log
  completedTimestamp: "2026-09-10T06:32:49Z"
  context: release
  gitBranch: main
  gitOwner: greencapitaltrade
  gitRepository: bifrost
  gitUrl: https://github.com/greencapitaltrade/bifrost.git
  lastCommitMessage: |
    fix(security): let a team see its assets whoever owns them

    A lessee operates vehicles it does not own. HGnG leases them out, so the
    asset stays in the lessor's company while the people driving and supervising
    it belong to the lessee's — and the lessee's team could not see the vehicle
    it runs.

    Two things caused it, and both had to go.

    `asset_comp_rule` is declared `global`, and a global rule is ANDed with every
    group rule, so the company check overrode team membership entirely: no team
    rule could ever widen it. It now also admits assets on a team the user
    belongs to.

    `get_asset_team_ids()` returned only teams the user *manages*, filtered to
    the user's own company. So a plain team member — an operator on the team —
    got an empty list and saw nothing at all, and a team lead saw nothing the
    moment the team's company differed from theirs, which is exactly the lessee
    case. It now counts membership as well as management, and does not filter by
    the user's active company.

    Company isolation is not loosened. Access still requires either the asset's
    company or a team the user actually belongs to, so anyone with no team
    relationship to the asset sees precisely what they saw before. That is what
    keeps the lessor's own view narrow: HGnG staff looking at a lessee's team see
    the assets HGnG owns, not the rest of that team's fleet.

    Five tests cover the model in both directions, including the two that must
    stay shut: the lessee does not inherit the lessor's other vehicles, and an
    unrelated company still sees nothing.

    Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
  lastCommitSHA: 01c0cfd50d2e7e48a47c8882d4c48d4554cf17f6
  message: 'Tasks Completed: 1 (Failed: 0, Cancelled 0), Skipped: 0'
  pipeline: greencapitaltrade/bifrost/main
  releaseNotesURL: https://github.com/greencapitaltrade/bifrost/releases/tag/v7.8.1
  startedTimestamp: "2026-09-10T06:28:39Z"
  status: Succeeded
  steps:
  - kind: Stage
    stage:
      completedTimestamp: "2026-09-10T06:32:49Z"
      name: Release
      startedTimestamp: "2026-09-10T06:31:49Z"
      status: Succeeded
  - kind: Promote
    promote:
      environment: staging
      pullRequest:
        pullRequestURL: https://github.com/greencapitaltrade/mcu/pull/5725
        startedTimestamp: "2026-09-10T06:32:49Z"
        status: Succeeded
      startedTimestamp: "2026-09-10T06:32:49Z"
      status: Succeeded
  - kind: Stage
    stage:
      completedTimestamp: "2026-09-10T06:33:59Z"
      name: from build pack
      startedTimestamp: "2026-09-10T06:28:44Z"
      status: Succeeded
      steps:
      - completedTimestamp: "2026-09-10T06:29:02Z"
        name: Git Clone
        startedTimestamp: "2026-09-10T06:28:44Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:07Z"
        name: Next Version
        startedTimestamp: "2026-09-10T06:29:03Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:12Z"
        name: Jx Variables
        startedTimestamp: "2026-09-10T06:29:08Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:15Z"
        name: Setup Pip Cache
        startedTimestamp: "2026-09-10T06:29:13Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:16Z"
        name: Process Config Templates
        startedTimestamp: "2026-09-10T06:29:15Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:16Z"
        name: Update Asset Management Version
        startedTimestamp: "2026-09-10T06:29:16Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:19Z"
        name: Check Registry
        startedTimestamp: "2026-09-10T06:29:17Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:31:55Z"
        name: Build Container Build
        startedTimestamp: "2026-09-10T06:29:20Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:32:05Z"
        name: Promote Changelog
        startedTimestamp: "2026-09-10T06:31:56Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:32:09Z"
        name: Promote Helm Release
        startedTimestamp: "2026-09-10T06:32:05Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:33:18Z"
        name: Promote Jx Promote
        startedTimestamp: "2026-09-10T06:32:10Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:33:59Z"
        name: Publish Org Kb
        startedTimestamp: "2026-09-10T06:33:18Z"
        status: Succeeded
  - kind: Stage
    stage:
      completedTimestamp: "2026-09-10T06:33:59Z"
      name: from build pack
      startedTimestamp: "2026-09-10T06:28:44Z"
      status: Succeeded
      steps:
      - completedTimestamp: "2026-09-10T06:29:02Z"
        name: Git Clone
        startedTimestamp: "2026-09-10T06:28:44Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:07Z"
        name: Next Version
        startedTimestamp: "2026-09-10T06:29:03Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:12Z"
        name: Jx Variables
        startedTimestamp: "2026-09-10T06:29:08Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:15Z"
        name: Setup Pip Cache
        startedTimestamp: "2026-09-10T06:29:13Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:16Z"
        name: Process Config Templates
        startedTimestamp: "2026-09-10T06:29:15Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:16Z"
        name: Update Asset Management Version
        startedTimestamp: "2026-09-10T06:29:16Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:29:19Z"
        name: Check Registry
        startedTimestamp: "2026-09-10T06:29:17Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:31:55Z"
        name: Build Container Build
        startedTimestamp: "2026-09-10T06:29:20Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:32:05Z"
        name: Promote Changelog
        startedTimestamp: "2026-09-10T06:31:56Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:32:09Z"
        name: Promote Helm Release
        startedTimestamp: "2026-09-10T06:32:05Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:33:18Z"
        name: Promote Jx Promote
        startedTimestamp: "2026-09-10T06:32:10Z"
        status: Succeeded
      - completedTimestamp: "2026-09-10T06:33:59Z"
        name: Publish Org Kb
        startedTimestamp: "2026-09-10T06:33:18Z"
        status: Succeeded
  version: 7.8.1
status: {}