Enforce multi-user ACL for sessions, settings, and workspaces.

Bridge UDS identity into DSH RPC via ALS, stamp/filter sessions, auto-provision per-empNo workspaces, and hide Settings/Add-workspace for roles that lack those permissions.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-09-08 04:29:48 +08:00
parent 9d16301700
commit 92ee170b2e
9 changed files with 752 additions and 31 deletions

View file

@ -12,3 +12,6 @@ loginSystemCode: '100000455558'
# 登录时传给 UAC 的来源系统 Code (留空则不传)
originSystemCode: ''
# Per-user workspaces under workspaceRoot/<empNo>; empty => $DSH_HOME/user-workspaces
workspaceRoot: ""