yumoqing/sage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

补充CRUD目录路径权限（无/index.ui后缀）

Browse Source 
ahserver indexes配置自动匹配index.ui，访问 /harnessed_agent/hermes_memory
时RBAC收到的path为 /harnessed_agent/hermes_memory（不含后缀）
同时注册目录路径和index.ui路径确保两种访问方式都能通过权限检查

- harnessed_agent: 12个CRUD目录各新增1个无后缀路径
- harnessed_reasoning: 3个CRUD目录各新增1个无后缀路径
This commit is contained in:
yumoqing 2026-05-13 13:58:50 +08:00
parent 050dd0b2da
commit 6c62313bb9
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
setup_harnessed_perms.sh
View File

@ -81,17 +81,31 @@ READ_PATHS=(
"/harnessed_agent/api/agent_config_get.dspy"
# ---------- CRUD index.ui (列表页面，只读浏览) ----------
# 注意: ahserver indexes 配置会自动匹配 index.ui，访问 /harnessed_agent/hermes_memory
# 时 path 为 /harnessed_agent/hermes_memory（不含/index.ui），两种路径都需要注册
"/harnessed_agent/hermes_memory"
"/harnessed_agent/hermes_memory/index.ui"
"/harnessed_agent/hermes_sessions"
"/harnessed_agent/hermes_sessions/index.ui"
"/harnessed_agent/hermes_skills"
"/harnessed_agent/hermes_skills/index.ui"
"/harnessed_agent/hermes_tasks"
"/harnessed_agent/hermes_tasks/index.ui"
"/harnessed_agent/hermes_workflows"
"/harnessed_agent/hermes_workflows/index.ui"
"/harnessed_agent/hermes_executions"
"/harnessed_agent/hermes_executions/index.ui"
"/harnessed_agent/hermes_executions_task"
"/harnessed_agent/hermes_executions_task/index.ui"
"/harnessed_agent/hermes_tasks_workflow"
"/harnessed_agent/hermes_tasks_workflow/index.ui"
"/harnessed_agent/harnessed_remote_skills"
"/harnessed_agent/harnessed_remote_skills/index.ui"
"/harnessed_agent/harnessed_agent_config_view"
"/harnessed_agent/harnessed_agent_config_view/index.ui"
"/harnessed_agent/executions_by_workflow"
"/harnessed_agent/executions_by_workflow/index.ui"
"/harnessed_agent/task_dependencies"
"/harnessed_agent/task_dependencies/index.ui"
# ---------- CRUD get_*.dspy (单条记录读取) ----------
@ -125,8 +139,11 @@ READ_PATHS=(
"/harnessed_reasoning/api/reasoning_submit.dspy"
# ---------- CRUD index.ui (列表页面，只读浏览) ----------
"/harnessed_reasoning/harnessed_reasoning_sessions_crud"
"/harnessed_reasoning/harnessed_reasoning_sessions_crud/index.ui"
"/harnessed_reasoning/harnessed_reasoning_session_detail"
"/harnessed_reasoning/harnessed_reasoning_session_detail/index.ui"
"/harnessed_reasoning/harnessed_reasoning_config_view"
"/harnessed_reasoning/harnessed_reasoning_config_view/index.ui"
# ---------- CRUD get_*.dspy (单条记录读取) ----------