Repository-based privilege escalation for workflows

A non-transitory computer-readable medium comprising instructions that, when executed by one or more processors, cause the one or more processors to perform a method for improved control of workflow execution, the method comprising:

• during execution of a first workflow for a user by an execution engine, receiving a request to execute a second workflow that is stored in a repository, wherein the second workflow comprises an operation that is associated with an operation privilege level, and wherein a user privilege level of the user is a lower privilege level than the operation privilege level;
• determining a repository privilege level associated with the repository by accessing repository privilege data in a file stored on the repository, wherein the repository privilege level comprises a privilege level applied to execution of workflows stored in the repository;
• escalating the user privilege level to the repository privilege level such that the user is allowed to execute the second workflow at the repository privilege level and is blocked from adding or modifying workflows in the repository;
• executing the second workflow, based on the request, at the repository privilege level for a duration over which the second workflow executes;
• restoring the user privilege level to the lower privilege level;
• and
• resuming execution of the first workflow at the lower privilege level.

A system comprising one or more processors and a non-transitory computer-readable medium comprising instructions that, when executed by the one or more processors, cause the one or more processors to perform a method for improved control of workflow execution, the method comprising:

• during execution of a first workflow for a user by an execution engine, receiving a request to execute a second workflow that is stored in a repository, wherein the second workflow comprises an operation that is associated with an operation privilege level, and wherein a user privilege level of the user is a lower privilege level than the operation privilege level;
• determining a repository privilege level associated with the repository by accessing repository privilege data in a file stored on the repository, wherein the repository privilege level comprises a privilege level applied to execution of workflows stored in the repository;
• escalating the user privilege level to the repository privilege level such that the user is allowed to execute the second workflow at the repository privilege level and is blocked from adding or modifying workflows in the repository;
• executing the second workflow, based on the request, at the repository privilege level for a duration over which the second workflow executes;
• restoring the user privilege level to the lower privilege level;
• and
• resuming execution of the first workflow at the lower privilege level.