refactor(controlplane): remove regex support in authz middleware

Merged
JI
4mo ago
+18-84

Removes the regex fallback from the authorization policy lookup in the control plane middleware, relying solely on exact endpoint matching against the server operations map.

The only rule that depended on the regex fallback (/controlplane.v1.OrgMetricsService/.*) is replaced with explicit entries for the Totals, TopWorkflowsByRunsCount, and DailyRunsCount endpoints.

This makes authorization matching unambiguous and avoids the risk of a loose pattern accidentally authorizing unintended operations.

AI Disclosure

This contribution was assisted by Claude Code.