Leopoldadmin/leocrm
1
0
Fork 0
Code Issues 363 Pull Requests Actions 7 Packages Projects Releases 1 Wiki Activity

Phase 1: Critical security fixes - 59 permissions, grants, RLS, mass-assignment, ownership, leaks, MIME
Check Cross-Plugin Imports / check (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Agent Zero
2026-08-03 22:32:03 +02:00
parent bd9fc15418
commit 4f970a11eb
9 changed files with 302 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/core/permission_registry.py
+60
View File
@@ -66,6 +66,66 @@ CORE_PERMISSIONS: list[dict[str, str]] = [
{"key": "workspaces:assign_users", "label": "Workspaces: Assign Users", "category": "core", "module": "workspaces"},
{"key": "workspaces:configure_modules", "label": "Workspaces: Configure Modules", "category": "core", "module": "workspaces"},
{"key": "system:admin", "label": "System: Admin (cross-tenant)", "category": "system", "module": "system"},
# ── Plugin permissions (registered at startup, but also listed here for completeness) ──
{"key": "ai:read", "label": "AI: Read", "category": "core", "module": "ai"},
{"key": "ai:write", "label": "AI: Write", "category": "core", "module": "ai"},
{"key": "ai:agents", "label": "AI: Agents", "category": "core", "module": "ai"},
{"key": "ai:config", "label": "AI: Config", "category": "core", "module": "ai"},
{"key": "ai_proactive:read", "label": "AI Proactive: Read", "category": "core", "module": "ai_proactive"},
{"key": "ai_proactive:write", "label": "AI Proactive: Write", "category": "core", "module": "ai_proactive"},
{"key": "ai_proactive:config", "label": "AI Proactive: Config", "category": "core", "module": "ai_proactive"},
{"key": "agents:read", "label": "Agents: Read", "category": "core", "module": "agents"},
{"key": "agents:write", "label": "Agents: Write", "category": "core", "module": "agents"},
{"key": "agents:delete", "label": "Agents: Delete", "category": "core", "module": "agents"},
{"key": "agents:execute", "label": "Agents: Execute", "category": "core", "module": "agents"},
{"key": "automation:read", "label": "Automation: Read", "category": "core", "module": "automation"},
{"key": "automation:write", "label": "Automation: Write", "category": "core", "module": "automation"},
{"key": "automation:delete", "label": "Automation: Delete", "category": "core", "module": "automation"},
{"key": "automation:execute", "label": "Automation: Execute", "category": "core", "module": "automation"},
{"key": "automation:admin", "label": "Automation: Admin", "category": "core", "module": "automation"},
{"key": "automation:configure", "label": "Automation: Configure", "category": "core", "module": "automation"},
{"key": "calendar:read", "label": "Calendar: Read", "category": "core", "module": "calendar"},
{"key": "calendar:write", "label": "Calendar: Write", "category": "core", "module": "calendar"},
{"key": "calendar:delete", "label": "Calendar: Delete", "category": "core", "module": "calendar"},
{"key": "calendar:share", "label": "Calendar: Share", "category": "core", "module": "calendar"},
{"key": "comm:read", "label": "Comm: Read", "category": "core", "module": "comm"},
{"key": "comm:write", "label": "Comm: Write", "category": "core", "module": "comm"},
{"key": "comm:delete", "label": "Comm: Delete", "category": "core", "module": "comm"},
{"key": "comm:manage", "label": "Comm: Manage", "category": "core", "module": "comm"},
{"key": "dashboard:read", "label": "Dashboard: Read", "category": "core", "module": "dashboard"},
{"key": "dms:read", "label": "DMS: Read", "category": "core", "module": "dms"},
{"key": "dms:write", "label": "DMS: Write", "category": "core", "module": "dms"},
{"key": "dms:delete", "label": "DMS: Delete", "category": "core", "module": "dms"},
{"key": "dms:share", "label": "DMS: Share", "category": "core", "module": "dms"},
{"key": "entity_links:read", "label": "Entity Links: Read", "category": "core", "module": "entity_links"},
{"key": "entity_links:write", "label": "Entity Links: Write", "category": "core", "module": "entity_links"},
{"key": "entity_links:delete", "label": "Entity Links: Delete", "category": "core", "module": "entity_links"},
{"key": "mail:read", "label": "Mail: Read", "category": "core", "module": "mail"},
{"key": "mail:write", "label": "Mail: Write", "category": "core", "module": "mail"},
{"key": "mail:delete", "label": "Mail: Delete", "category": "core", "module": "mail"},
{"key": "mail:send", "label": "Mail: Send", "category": "core", "module": "mail"},
{"key": "mail:share", "label": "Mail: Share", "category": "core", "module": "mail"},
{"key": "mail:config", "label": "Mail: Config", "category": "core", "module": "mail"},
{"key": "mcp:read", "label": "MCP: Read", "category": "core", "module": "mcp"},
{"key": "mcp:write", "label": "MCP: Write", "category": "core", "module": "mcp"},
{"key": "permissions:admin", "label": "Permissions: Admin", "category": "core", "module": "permissions"},
{"key": "permissions:delegations:read", "label": "Permissions: Delegations: Read", "category": "core", "module": "permissions"},
{"key": "permissions:delegations:write", "label": "Permissions: Delegations: Write", "category": "core", "module": "permissions"},
{"key": "permissions:policies:read", "label": "Permissions: Policies: Read", "category": "core", "module": "permissions"},
{"key": "permissions:policies:write", "label": "Permissions: Policies: Write", "category": "core", "module": "permissions"},
{"key": "permissions:templates:read", "label": "Permissions: Templates: Read", "category": "core", "module": "permissions"},
{"key": "permissions:templates:write", "label": "Permissions: Templates: Write", "category": "core", "module": "permissions"},
{"key": "reports:read", "label": "Reports: Read", "category": "core", "module": "reports"},
{"key": "reports:generate", "label": "Reports: Generate", "category": "core", "module": "reports"},
{"key": "reports:manage_templates", "label": "Reports: Manage Templates", "category": "core", "module": "reports"},
{"key": "search:read", "label": "Search: Read", "category": "core", "module": "search"},
{"key": "search:admin", "label": "Search: Admin", "category": "core", "module": "search"},
{"key": "tags:read", "label": "Tags: Read", "category": "core", "module": "tags"},
{"key": "tags:write", "label": "Tags: Write", "category": "core", "module": "tags"},
{"key": "tags:delete", "label": "Tags: Delete", "category": "core", "module": "tags"},
{"key": "tasks:read", "label": "Tasks: Read", "category": "core", "module": "tasks"},
{"key": "tasks:write", "label": "Tasks: Write", "category": "core", "module": "tasks"},
{"key": "tasks:delete", "label": "Tasks: Delete", "category": "core", "module": "tasks"},
]