2 Commits

Author SHA1 Message Date
Stephan Behnke
d23e1712ce Migrate activity_api_batch_security_test.go (#10711)
WISOTT
2026-06-16 10:28:36 -07:00
feiyang
449e4c363e block unintended activities scheduled on per-ns-tq (#9757)
## What changed?
The PR adds a workflowTaskQueueName parameter to
`ValidateAndNormalizeEmbeddedActivity` and uses it as the
parentTaskQueue to leverage the existing
CheckInternalPerNsTaskQueueAllowed check. This blocks normal workflows
from scheduling activities on temporal-sys-per-ns-tq while allowing
internal per-ns-tq workflows to do so.

## Why?
Activities cannot be scheduled in the internal per-ns-tq unless they are
initiated from an internal workflow.

## How did you test it?
- [x] built
- [x] run locally and tested manually
- [x] covered by existing tests
- [x] added new unit test(s)
- [x] added new functional test(s)

## Potential risks
may potentially break features or tests (need to carefully run
regression
2026-04-03 11:26:14 -07:00