hansjone/oclaw
1
0
Fork 0
mirror of https://github.com/hansjone/oclaw.git synced 2026-10-16 12:50:48 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

Restrict @ mention and session query ACL so admin/user only see owned or workspace sessions.

Browse source 
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-09-10 00:30:46 +08:00
parent e48b8bd082
commit e2c2e949ed
5 changed files with 394 additions and 110 deletions
Download patch file Download diff file Expand all files Collapse all files

7
uds-auth/lib/roles.js
View file

@ -2,9 +2,10 @@
* uds-auth 角色存储 + 权限管理
*
* 角色:
* super_admin 所有权限 + 用户管理
* admin 设置权限 + 仅看自己会话
* user 仅看自己会话，无设置
* super_admin 所有权限 + 用户管理 + 可见全部会话（含 @）
* fallback_admin 等同 super_admin（兜底 administrator）
* admin 设置权限 + 仅看自己会话（含 @）
* user 仅看自己会话，无设置
*
* 持久化: roles.json (单实例文件) + MemoryStore 同步
*/