Skip to content

Conversation

@jirivrany
Copy link
Collaborator

Add rule access control and whitelist permission checks

  • Introduced new auth helpers to determine which rules a user can modify
  • Added functions get_user_allowed_rule_ids and check_user_can_modify_rule in auth module
  • Updated rule and whitelist views to validate user permissions before deleting or updating rules
  • Removed session based rule tracking in favor of dynamic access checks

Updated withdraw_expired to delete expired rules after withdraw

  • added delete_expired_rules method
  • Added EXPIRATION_THRESHOLD config option

Bumped version to 1.1.6

Introduced new auth helpers to determine which rules a user can modify

Added functions get_user_allowed_rule_ids and check_user_can_modify_rule in auth module

Updated rule and whitelist views to validate user permissions before deleting or updating rules

Removed session based rule tracking in favor of dynamic access checks

Added temporary session debug logging in dashboard

Added EXPIRATION_THRESHOLD config option

Bumped version to 1.1.6
@jirivrany jirivrany merged commit 342f943 into main Oct 8, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants