Skip to content

KC-1156 Fix compliance record-access-report user_filter regression#1837

Merged
craiglurey merged 1 commit intoreleasefrom
KC-1156
Feb 24, 2026
Merged

KC-1156 Fix compliance record-access-report user_filter regression#1837
craiglurey merged 1 commit intoreleasefrom
KC-1156

Conversation

@aaunario-keeper
Copy link
Contributor

@aaunario-keeper aaunario-keeper commented Feb 24, 2026

Summary

  • Preserve full sharing graph loading for record-access-report/summary-report paths while keeping report-level filtering
  • Keep aging refresh behavior aligned with actual fetched record sets

Validation

  • Ran compliance harness on this branch (tests/compliance/run.sh after)
  • Ran deterministic before/after/diff harness with pinned inputs (tests/compliance/run.sh all)

…iltering regression

The user_filter optimization from PR #1814 narrowed the compliance data
fetch when --email/--username was specified, excluding shared records
owned by other users from the result set. This broke --report-type vault
(which needs the full sharing graph) and understated summary-report
total_items.

Fix: add needs_full_sharing_data flag to BaseComplianceReportCommand that
bypasses data-level user_filter while preserving report-level filtering.
Applied to record-access-report and summary-report. Also fix a
pre-existing bug where last_aging_refreshed was updated without actually
fetching aging data (empty rec_ids on cold cache).

Add A/B test harness (tests/compliance/) with field-level JSON diff,
Windows/MSYS compatibility, auto-discovery, and KC-1142 regression tests.
@craiglurey craiglurey merged commit 3e4a19d into release Feb 24, 2026
4 checks passed
sk-keeper pushed a commit that referenced this pull request Feb 25, 2026
…iltering regression (#1837)

The user_filter optimization from PR #1814 narrowed the compliance data
fetch when --email/--username was specified, excluding shared records
owned by other users from the result set. This broke --report-type vault
(which needs the full sharing graph) and understated summary-report
total_items.

Fix: add needs_full_sharing_data flag to BaseComplianceReportCommand that
bypasses data-level user_filter while preserving report-level filtering.
Applied to record-access-report and summary-report. Also fix a
pre-existing bug where last_aging_refreshed was updated without actually
fetching aging data (empty rec_ids on cold cache).

Add A/B test harness (tests/compliance/) with field-level JSON diff,
Windows/MSYS compatibility, auto-discovery, and KC-1142 regression tests.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants