oclaw/uds-auth/lib
oliver 1f2ff7e00b Block inert composer card clicks unless super_admin.
The workspace picker opens from data-composer-card with cardWorkspaceTrigger, not the aria-label node; lock that surface for non-creators.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 09:25:43 +08:00
..
middleware Fix first-login bootstrap to super_admin; allow admin settings via canAccessSettings. 2026-09-08 03:23:20 +08:00
session change log in 2026-09-08 00:28:58 +08:00
uds Query user profile via intranet direct HTTP; upgrade/clear trust sessions without department. 2026-09-08 02:50:34 +08:00
utils change log in 2026-09-08 00:28:58 +08:00
api.js Restore uds-auth in oclaw: DSH plugin with token+profile auth, settings UI, and pagination. 2026-09-08 01:46:17 +08:00
client.js Block inert composer card clicks unless super_admin. 2026-09-08 09:25:43 +08:00
config.js change log in 2026-09-08 00:28:58 +08:00
context.js change log in 2026-09-08 00:28:58 +08:00
dsh-acl.js Block workspace directory picker unless super_admin. 2026-09-08 08:30:55 +08:00
index.js Enforce multi-user ACL for sessions, settings, and workspaces. 2026-09-08 04:29:48 +08:00
roles.js Enforce multi-user ACL for sessions, settings, and workspaces. 2026-09-08 04:29:48 +08:00
session-acl.js Enforce multi-user ACL for sessions, settings, and workspaces. 2026-09-08 04:29:48 +08:00
workspace-provision.js Enforce multi-user ACL for sessions, settings, and workspaces. 2026-09-08 04:29:48 +08:00