4 commits

Author	SHA1	Message	Date
oliver	ad0cc98b38	Make session visibility preference-driven and keep system-channel ACL separate. ... Super/fallback can toggle view-all (default on); admin/user stay own-only while still seeing unowned system sessions. Add restore/prune helpers so empty-shell cleanup is explicit and recoverable.	2026-09-14 20:48:15 +08:00
oliver	e2c2e949ed	Restrict @ mention and session query ACL so admin/user only see owned or workspace sessions. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-10 00:30:46 +08:00
oliver	bad000d5b6	Use workspace membership as session ACL; keep owners for audit. ... Session RPC access checks visible workspaces (and cwd), wraps prompt and related methods with address.sessionId extraction, and gates create paths for non-admins. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 14:25:52 +08:00
oliver	92ee170b2e	Enforce multi-user ACL for sessions, settings, and workspaces. ... Bridge UDS identity into DSH RPC via ALS, stamp/filter sessions, auto-provision per-empNo workspaces, and hide Settings/Add-workspace for roles that lack those permissions. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 04:29:48 +08:00