2cf253f6aa
Gate dsh-ops-cron APIs and UI behind UDS login.
...
Reject anonymous /dsh-ops-cron requests after session validation, hide the 定时任务 chrome when logged out, and block client fetch to the cron HTTP API.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 08:06:54 +08:00
db907a9489
Hide session list for anonymous UDS users.
...
Filter session.list/search on the client when cookies are absent, ignore broadcast session-added events, and deepen host listState wrapping so ungrouped rows no longer leak while logged out.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 07:53:35 +08:00
92ee170b2e
Enforce multi-user ACL for sessions, settings, and workspaces.
...
Bridge UDS identity into DSH RPC via ALS, stamp/filter sessions, auto-provision per-empNo workspaces, and hide Settings/Add-workspace for roles that lack those permissions.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 04:29:48 +08:00
9d16301700
Match UDS login chrome to Settings trigger; sit login near sidebar edge.
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 04:00:29 +08:00
1ac1aec952
Lay Settings and UDS login on one sidebar foot row side by side.
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 03:54:08 +08:00
e052ef4bf4
Pin UDS login to sidebar.footer.action (stable foot next to Settings, right-aligned).
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 03:50:19 +08:00
7e2d8ef5d8
Avoid login badge overlapping Session log: header when in session, overlay only when idle.
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 03:44:12 +08:00
705c6864ef
Show UDS login on shell.overlay so it is visible without an active session.
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 03:39:58 +08:00
8f569070a0
Remove broken /settings shortcut from UDS login badge panel.
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 03:34:25 +08:00
b3b5b6997e
Fix first-login bootstrap to super_admin; allow admin settings via canAccessSettings.
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 03:23:20 +08:00
74a86ff832
Fix QR login: pass userSearchUrl into auth middleware for token+empNo verify.
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 02:37:08 +08:00
b535714000
Move UDS login into header.utilities so it sits left of session log-download.
...
EOF
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 02:22:43 +08:00
91a1804f68
Place UDS login beside session log-download in the same header.actions slot.
2026-09-08 02:17:17 +08:00
b4fa832a6b
Move UDS login back to top-right overlay, docked left of toggles with matching chrome style.
2026-09-08 02:13:25 +08:00
6caafe9590
Fix uds-auth client.js syntax error that broke the whole plugin bundle.
2026-09-08 02:00:55 +08:00
6360f80349
Move UDS login badge into session header actions to avoid covering Search/toggles.
2026-09-08 01:58:31 +08:00
505f9dea3f
Restore uds-auth in oclaw: DSH plugin with token+profile auth, settings UI, and pagination.
2026-09-08 01:46:17 +08:00
