fix: AD lookup by email/UPN instead of sAMAccountName to prevent wrong requester email

2026-07-23 09:54:46 +07:00
parent 3c70937431
commit 44117f90b3
2 changed files with 9 additions and 6 deletions
@@ -112,7 +112,7 @@ async def instruct_router_handler(msg: Message):
                    subject = f"Запрос доступа к Trueconf"
                    description = f"Пользователь {cn} ({user_id}) запросил инструкцию по Trueconf, но не имеет группы 2FA. Требуется выдача доступа."
                    # Ищем email пользователя в AD, как в service_desk
-                    ad_user = await asyncio.to_thread(get_ad_user_sync, login)
+                    ad_user = await asyncio.to_thread(get_ad_user_sync, user_id)
                    requester_email = ad_user.get("mail") if ad_user and ad_user.get("mail") else DEFAULT_REQUESTER
                    ticket_id = await create_ticket_in_sd(requester_email, subject, description, "Кемерово")
                    logger.info(f"SD ticket created for {cn}: #{ticket_id}")