CI builds awx_devel from requirements_git; pin at 282fb8e exposed a 6-arg
log_orm_bypass_violation while workflow pseudo-field audit uses the 5-arg
shape from newer DAB. Align pin with #1147 head and tighten dedupe test setup.
Co-authored-by: Cursor <cursoragent@cursor.com>
Point bulk host/job launch create() and workflow bulk audit at DAB
validation_bypass_observability guidance for is_valid() + audit_bulk_*.
Co-authored-by: Cursor <cursoragent@cursor.com>
Align BulkHostCreateSerializer with bulk job launch so validate()
rejection logs are not duplicated by audit_bulk_model_instances when
DAB dedupe requires serializer_mediated_persistence_context.
Co-authored-by: Cursor <cursoragent@cursor.com>
Align requirements_git with django-ansible-base#1147 head so CI has
serializer_mediated_persistence_context used by bulk job launch create.
Signed-off-by: Vidya Nambiar <vnambiar@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Use DAB serializer_mediated_persistence_context on BulkJobLaunchSerializer
so validate() rejection logs are not duplicated by bulk workflow node audit.
Co-authored-by: Cursor <cursoragent@cursor.com>
Install django-ansible-base from the AAP-86051 companion commit so
bulk_validation_audit exists in the awx_devel image used by all CI jobs.
Signed-off-by: Vidya Nambiar <vnambiar@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Use DAB bulk_update auditing instead of a duplicate AWX helper, narrow caller
allowlists so logs point at serializers and scheduler, and document wiring.
Signed-off-by: Vidya Nambiar <vnambiar@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Add field-scoped audit_bulk_update_instances for bulk_update_sorted_by_id
and scheduler job_explanation batches. Expand functional and unit tests for
bulk host/workflow create and bulk update bypass logging.
Co-authored-by: Cursor <cursoragent@cursor.com>
Log Tier 1/2 bypass violations for WorkflowJobNode prompt fields stored in
char_prompts, which post_save and bulk CharField scans do not cover alone.
Co-authored-by: Cursor <cursoragent@cursor.com>
Register ORM bypass signals and AWX caller prefixes at startup, and audit
bulk host create before bulk_create.
Co-authored-by: Cursor <cursoragent@cursor.com>
Vidya NambiarandCursor