Files
Pulse/pkg/auth/permissions.go
rcourtman 2ebe65bbc5 security: add scope checks to AI Patrol and agent profile endpoints
- AI Patrol mutation endpoints (acknowledge, dismiss, suppress, snooze, resolve,
  findings/note, suppressions/*) now require ai:execute scope to prevent
  low-privilege tokens from blinding patrol by hiding/suppressing findings

- Agent profile admin endpoints (/api/admin/profiles/*) now require
  settings:write scope to prevent low-privilege tokens from modifying
  fleet-wide agent behavior
2026-02-03 19:29:56 +00:00

21 lines
387 B
Go

package auth
// Standard Actions
const (
ActionRead = "read"
ActionWrite = "write"
ActionDelete = "delete"
ActionAdmin = "admin"
)
// Standard Resources
const (
ResourceSettings = "settings"
ResourceAuditLogs = "audit_logs"
ResourceNodes = "nodes"
ResourceUsers = "users"
ResourceLicense = "license"
ResourceAI = "ai"
ResourceDiscovery = "discovery"
)