fix rejected exceptions execution

Signed-off-by: Ivan Milchev <[email protected]>
mondoohq · Nov 30, 2023 · 33994e4 · 33994e4
1 parent 8a47a33
commit 33994e4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/policy/resolver.go b/policy/resolver.go
@@ -725,13 +725,13 @@ func (s *LocalServices) policyToJobs(ctx context.Context, policyMrn string, owne
 		}
 		for i := range group.Checks {
 			check := group.Checks[i]
-			if check.Action == explorer.Action_DEACTIVATE || group.Type == GroupType_DISABLE {
+			if check.Action == explorer.Action_DEACTIVATE || (group.Type == GroupType_DISABLE && group.ReviewStatus != ReviewStatus_REJECTED) {
 				cache.removedQueries[check.Mrn] = struct{}{}
 			}
 		}
 		for i := range group.Queries {
 			query := group.Queries[i]
-			if query.Action == explorer.Action_DEACTIVATE || group.Type == GroupType_DISABLE {
+			if query.Action == explorer.Action_DEACTIVATE || (group.Type == GroupType_DISABLE && group.ReviewStatus != ReviewStatus_REJECTED) {
 				cache.removedQueries[query.Mrn] = struct{}{}
 			}
 		}