hansjone/oclaw
1
0
Fork 0
mirror of https://github.com/hansjone/oclaw.git synced 2026-10-18 13:33:53 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

Allow admin (and Host plugins) to create workspaces.

Browse source 
super_admin/fallback_admin already could; admin now has canCreateWorkspace, and Host-side creates without browser ALS (IM) are no longer blocked as forbidden.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-09-16 21:52:14 +08:00
parent 050b99426f
commit 89700ef4f9
6 changed files with 26 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

7
uds-auth/lib/dsh-acl.js
View file

@ -929,7 +929,10 @@ ctx.inject(['workspaceController'], (wctx) => {
wc.create = async (request) => {
const identity = getUserContext()
if (identity?._internalProvision) return origCreate(request)
if (!identity?.permissions?.canCreateWorkspace) {
// No ALS identity: Host-side plugins (IM / cron) create workspaces without a
// browser login. Authenticated browser calls always run under user context;
// there admin / super_admin / fallback_admin must have canCreateWorkspace.
if (identity && !identity.permissions?.canCreateWorkspace) {
throwForbidden('workspace_create_forbidden')
}
return origCreate(request)
@ -1060,7 +1063,7 @@ ctx.inject(['workspaceController'], (wctx) => {
}
})
// directory picker: only super_admin may pick/create dirs (others get auto workspaces)
// directory picker: admin / super_admin / fallback_admin (canCreateWorkspace)
ctx.inject(['directoryPicker'], (dctx) => {
const dp = dctx.directoryPicker
if (!dp || dp.__udsAcl) return