multica

mirror of https://github.com/multica-ai/multica.git synced 2026-07-06 14:00:09 +02:00

Files

J 2314e5d35f fix(autopilot): restrict access-list management to creator/admin only

Final-review fix: AddAutopilotCollaborator/RemoveAutopilotCollaborator
used requireAutopilotWrite, which counts granted collaborators as
writers — so a collaborator could in turn grant/revoke others, a
privilege escalation contradicting the 'collaborators cannot re-grant'
design.

- New requireAutopilotAccessManagement guard uses the narrower
  autopilotWriteByOwnership predicate (creator or workspace owner/admin
  only); swapped into both collaborator endpoints. Collaborators keep
  their edit/trigger/secret write-execute rights.
- GetAutopilot now also stamps can_manage_access (narrower than
  can_write); the detail page gates the 'Manage access' button on it so
  collaborators no longer see an entry that would 403.
- Tests: collaborator grant-others -> 403, revoke-peer -> 403, while
  retaining edit; can_manage_access true for owner, false for collaborator.

MUL-3807

Co-authored-by: multica-agent <github@multica.ai>

2026-06-29 17:08:55 +08:00

cmd

feat(autopilot): delegate write access via collaborators + manage-access UI

2026-06-29 15:23:01 +08:00

internal

fix(autopilot): restrict access-list management to creator/admin only

2026-06-29 17:08:55 +08:00

migrations

feat(autopilot): delegate write access via collaborators + manage-access UI

2026-06-29 15:23:01 +08:00

pkg

feat(autopilot): delegate write access via collaborators + manage-access UI