refactor(BA-6891): run kernel admin history search as a global action

The admin search is system-wide and unscoped, so its authorization is
the SUPERADMIN role gate rather than RBAC scope resolution. That is
what BaseGlobalAction and GlobalActionProcessor model, and the
processor applies the gate on the action path as defense in depth
behind the route's superadmin_required middleware.

The scoped counterpart is unchanged: it resolves against an RBAC
scope and stays on the plain action path.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: jopemachine

src/ai/backend/manager/services/scheduling_history/actions/search_kernel_history.py

@@ -5,16 +5,20 @@
 
 from ai.backend.common.data.permission.types import EntityType
 from ai.backend.manager.actions.action import BaseActionResult
+from ai.backend.manager.actions.action.global_action import BaseGlobalAction
 from ai.backend.manager.actions.types import ActionOperationType
 from ai.backend.manager.data.kernel.types import KernelSchedulingHistoryData
 from ai.backend.manager.repositories.base import BatchQuerier
 
-from .base import SchedulingHistoryAction
-
 
 @dataclass
-class SearchKernelHistoryAction(SchedulingHistoryAction):
-    """Action to search kernel scheduling history (admin API)."""
+class SearchKernelHistoryAction(BaseGlobalAction):
+    """Action to search kernel scheduling history (admin API).
+
+    System-wide and unscoped: authorization is the SUPERADMIN role gate rather
+    than RBAC scope resolution, so this runs through ``GlobalActionProcessor``.
+    The scoped counterpart stays on the RBAC path.
+    """
 
     querier: BatchQuerier
 

src/ai/backend/manager/services/scheduling_history/processors.py

@@ -4,6 +4,7 @@
 
 from ai.backend.manager.actions.monitors.monitor import ActionMonitor
 from ai.backend.manager.actions.processor import ActionProcessor
+from ai.backend.manager.actions.processor.global_action import GlobalActionProcessor
 from ai.backend.manager.actions.types import AbstractProcessorPackage, ActionSpec
 from ai.backend.manager.actions.validators import ActionValidators
 
@@ -35,7 +36,7 @@ class SchedulingHistoryProcessors(AbstractProcessorPackage):
     search_session_history: ActionProcessor[
         SearchSessionHistoryAction, SearchSessionHistoryActionResult
     ]
-    search_kernel_history: ActionProcessor[
+    search_kernel_history: GlobalActionProcessor[
         SearchKernelHistoryAction, SearchKernelHistoryActionResult
     ]
     search_deployment_history: ActionProcessor[
@@ -67,7 +68,9 @@ def __init__(
         self.search_session_history = ActionProcessor(
             service.search_session_history, action_monitors
         )
-        self.search_kernel_history = ActionProcessor(service.search_kernel_history, action_monitors)
+        self.search_kernel_history = GlobalActionProcessor(
+            service.search_kernel_history, action_monitors
+        )
         self.search_deployment_history = ActionProcessor(
             service.search_deployment_history, action_monitors
         )