#1168 Santa: user approval requests from blocked executions Issue created by javuto Part of Santa/Workshop parity, building on the Santa sync server from #1142 (

pkg/santa

,

osctrl-tls

sync endpoint, Santa page in the UI). Problem In LOCKDOWN every legitimate block becomes an admin ticket. Workshop lets the blocked user request approval straight from the Santa dialog. Scope • Push

EventDetailURL

to clients so the Santa block dialog links to an osctrl request page for that event (hash, machine). • Request page: user authenticates through osctrl SSO, adds a justification, submits. • Requests stored per environment with status (pending/approved/denied/expired) and linked event. • Decide the identity model for requesters who are not osctrl users (minimal "requester" role or SSO-only access). Acceptance • A blocked user can open the link, sign in and create one request; duplicates for the same hash/machine are merged. • Requesters cannot see other users' requests or any other osctrl data. jmpsec/osctrl