Draft: Add support for composite identity to workflow resolver
What does this MR do and why?
This MR fixes the broken check for availability for Duo Agent Platform, instead of checking if the SA has access (which it never will have), we check if the user has access.
References
Screenshots or screen recordings
| Before | After |
|---|---|
How to set up and validate locally
- Checkout the default branch
- Enable the feature flag
:duo_workflow_use_composite_identity - Start a workflow, any workflow, it will fail as it doesn't have permission
- Checkout this branch and start any workflow again, it will succeed
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Related to #566921