"""系统台账域通知模板 —— 只有一条,收件面只有 IT。 台账由 IT 维护:员工改不了自己名下那一行,也不应该能改 —— 归属是一条 问责记录,不是偏好设置。员工唯一能做的动作是说「这不该由我负责」, 那是一个需要 IT 裁决的主张,于是它变成一条推送。 收件人只取在职 ``global_admin``:只有这个角色能改归属 (``can_manage_system_registry``)。推给别人等于把一件他解决不了的事 塞进他的收件箱。没有 cron,没有经理链 —— 一次人工动作一条推送。 """ from __future__ import annotations TEMPLATES: dict[str, dict[str, str]] = { "system_registry.ownership_disputed": { "subject": "{disputer_name} 表示不该由自己负责「{system_name}」", "subject_en": ( "{disputer_name} says they should not own \"{system_name}\"" ), "subject_ja": ( "{disputer_name} が「{system_name}」の責任者ではないと申告" ), "body_text": ( "台账里 [b]{system_name}[/b]({system_slug})的" "{role_label}登记的是 [b]{disputer_name}[/b],但本人表示" "不该由自己负责。\n\n" " · 提出人: {disputer_name} <{disputer_email}>\n" " · 说明: {note_block}\n\n" "系统的归属决定了漏洞报告发给谁、离职时闸门去追谁," "所以这条要么改对,要么当面确认清楚 —— 挂着一个本人不认的" "名字,等于这个系统实际上没有人负责。\n\n" " {portal_url}\n\n" "{cta_line}\n\n" "— Helix 系统台账" ), "body_text_en": ( "The {role_label} recorded for [b]{system_name}[/b] " "({system_slug}) is [b]{disputer_name}[/b], who says it should " "not be them.\n\n" " · Raised by: {disputer_name} <{disputer_email}>\n" " · Note: {note_block}\n\n" "Ownership decides who a vulnerability report is routed to and " "who the offboarding gate chases, so this either gets corrected " "or confirmed with them directly — a name the person does not " "accept means the system effectively has no owner.\n\n" " {portal_url}\n\n" "{cta_line}\n\n" "— Helix System Registry" ), "body_text_ja": ( "台帳上、[b]{system_name}[/b]({system_slug})の" "{role_label}は [b]{disputer_name}[/b] と登録されていますが、" "本人が自分の担当ではないと申告しています。\n\n" " · 申告者: {disputer_name} <{disputer_email}>\n" " · 補足: {note_block}\n\n" "責任者は脆弱性報告の割り当て先と退職ゲートの追跡先を決めます。" "本人が認めない名前が残っている状態は、実質的に責任者不在です。" "\n\n {portal_url}\n\n" "{cta_line}\n\n" "— Helix システム台帳" ), }, }