hansjone/oclaw
1
0
Fork 0
mirror of https://github.com/hansjone/oclaw.git synced 2026-10-14 04:13:18 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Restrict @ mention and session query ACL so admin/user only see owned or workspace sessions.

Browse source 
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-09-10 00:30:46 +08:00
parent e48b8bd082
commit e2c2e949ed
5 changed files with 394 additions and 110 deletions
Download patch file Download diff file Expand all files Collapse all files

6
uds-auth/lib/session-acl.js
View file

@ -1,8 +1,8 @@
/**
* Session ownership audit store — sessionId → empNo.
* Session ownership store — sessionId → empNo.
*
* Used for export / analytics. Tenant isolation is workspace-based
* (see dsh-acl.js); missing owner must NOT deny access by itself.
* Used with workspace/cwd checks in dsh-acl.js (owner OR own workspace).
* Missing owner must NOT deny access by itself (legacy sessions).
*/
import { readFile, writeFile, mkdir } from 'node:fs/promises'
import { dirname, resolve } from 'node:path'