portal: handle legacy approved requests

backend/atlas_portal/provisioning.py

@@ -118,6 +118,13 @@ def provision_access_request(request_code: str) -> ProvisionResult:
             revealed_at = row.get("initial_password_revealed_at")
             attempted_at = row.get("provision_attempted_at")
 
+            if status == "approved":
+                conn.execute(
+                    "UPDATE access_requests SET status = 'accounts_building' WHERE request_code = %s AND status = 'approved'",
+                    (request_code,),
+                )
+                status = "accounts_building"
+
             if status not in {"accounts_building", "awaiting_onboarding", "ready"}:
                 return ProvisionResult(ok=False, status=status or "unknown")