feat: refactor rbac/sharing to support new permissions and auth types

This commit is contained in:
LukeGus
2026-07-16 17:36:32 -05:00
parent 552ceefec2
commit 3cc51fe920
72 changed files with 6258 additions and 3761 deletions
+4 -4
View File
@@ -199,7 +199,7 @@ export function registerTunnelRoutes(app: express.Express): void {
const accessInfo = await permissionManager.canAccessHost(
userId,
tunnelConfig.sourceHostId,
"read",
"connect",
);
if (!accessInfo.hasAccess) {
@@ -285,7 +285,7 @@ export function registerTunnelRoutes(app: express.Express): void {
const endpointAccess = await permissionManager.canAccessHost(
userId,
endpointHost.id,
"read",
"connect",
);
if (!endpointAccess.hasAccess) {
tunnelLogger.warn(
@@ -442,7 +442,7 @@ export function registerTunnelRoutes(app: express.Express): void {
const accessInfo = await permissionManager.canAccessHost(
userId,
config.sourceHostId,
"read",
"connect",
);
if (!accessInfo.hasAccess) {
return res.status(403).json({ error: "Access denied" });
@@ -547,7 +547,7 @@ export function registerTunnelRoutes(app: express.Express): void {
const accessInfo = await permissionManager.canAccessHost(
userId,
config.sourceHostId,
"read",
"connect",
);
if (!accessInfo.hasAccess) {
return res.status(403).json({ error: "Access denied" });