From e82d810ac72174bf2002adf92797e3c407eb7890 Mon Sep 17 00:00:00 2001
From: x032205 <x032205@gmail.com>
Date: Sat, 6 Dec 2025 17:59:01 -0500
Subject: [PATCH] allow resourceId to be undefined

---
 .../approval-policy/pam-access/pam-access-policy-factory.ts     | 2 +-
 .../approval-policy/pam-access/pam-access-policy-schemas.ts     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/src/services/approval-policy/pam-access/pam-access-policy-factory.ts b/backend/src/services/approval-policy/pam-access/pam-access-policy-factory.ts
index 2e6f9990f..f338cb97b 100644
--- a/backend/src/services/approval-policy/pam-access/pam-access-policy-factory.ts
+++ b/backend/src/services/approval-policy/pam-access/pam-access-policy-factory.ts
@@ -29,7 +29,7 @@ export const pamAccessPolicyFactory: TApprovalResourceFactory<
     for (const policy of policies) {
       const p = policy as TPamAccessPolicy;
       for (const c of p.conditions.conditions) {
-        if (!c.resourceIds.some((r) => r === inputs.resourceId)) {
+        if (c.resourceIds && !c.resourceIds.some((r) => r === inputs.resourceId)) {
           // eslint-disable-next-line no-continue
           continue;
         }
diff --git a/backend/src/services/approval-policy/pam-access/pam-access-policy-schemas.ts b/backend/src/services/approval-policy/pam-access/pam-access-policy-schemas.ts
index b76b2e271..2b1e95cef 100644
--- a/backend/src/services/approval-policy/pam-access/pam-access-policy-schemas.ts
+++ b/backend/src/services/approval-policy/pam-access/pam-access-policy-schemas.ts
@@ -19,7 +19,7 @@ export const PamAccessPolicyInputsSchema = z.object({
 // Conditions
 export const PamAccessPolicyConditionsSchema = z
   .object({
-    resourceIds: z.string().uuid().array(),
+    resourceIds: z.string().uuid().array().optional(),
     accountPaths: z.string().array() // TODO(andrey): Add path & wildcard validation
   })
   .array();