From 65e2838aa9bdd0ffed9d9ed7d66b4daefb4ccd41 Mon Sep 17 00:00:00 2001
From: break <youdang2000@gmail.com>
Date: Fri, 7 Aug 2026 11:59:42 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=E5=AE=A1=E8=AE=A1=E5=85=B3?=
 =?UTF-8?q?=E8=81=94=E8=B5=84=E6=BA=90=E4=B8=BB=E4=BD=93=E6=8A=95=E5=BD=B1?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 internal/infrastructure/audit/writer.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/internal/infrastructure/audit/writer.go b/internal/infrastructure/audit/writer.go
index 5489e10..ad8b71c 100644
--- a/internal/infrastructure/audit/writer.go
+++ b/internal/infrastructure/audit/writer.go
@@ -1025,7 +1025,10 @@ func (w *Writer) buildResources(inputs []ResourceInput, action ActionDefinition)
 		}
 		visibility := input.SubjectVisibility
 		if visibility == "" {
-			visibility = action.DefaultVisibility
+			visibility = constants.AuditSubjectInternalOnly
+			if input.Relation == constants.AuditResourceRelationPrimary {
+				visibility = action.DefaultVisibility
+			}
 		}
 		subjectDataInput, err := validateSubjectProjection(input, action, visibility)
 		if err != nil {