Repository navigation
Permission check - #4146
Permission check#4146
Conversation
285e019 to
3f4998e
Compare
| @@ -81,2405 +81,2485 @@ | |||
| "anonymousGroup": "anonymous", | |||
| "roles": [ | |||
| { | |||
| "rolename": "openwb-version:11", | |||
| "rolename": "openwb-version:13", | |||
There was a problem hiding this comment.
Warum wird die 12 übersprungen?
There was a problem hiding this comment.
Ich musste ein Rebase wegen der PV-Prognose machen. Dabei hatte ich nicht gesehen, dass dort anscheinend die Version nicht hochgezählt wurde. War mir durchgegangen.
There was a problem hiding this comment.
🔵 Needs a closer look
Upgraded installations need an explicit group-membership migration for the new permissions.
No open issues 🎉
What changed in this PR
Updates Mosquitto ACL roles and group permissions to align with settings views and MQTT topics.
Changes:
- Reorganizes resource-specific ACL templates.
- Updates roles, groups, and permissions.
- Bumps the ACL configuration version to 13.
| File | Summary |
|---|---|
data/config/mosquitto/public/role-templates.json |
Updates per-resource MQTT permission templates. |
data/config/mosquitto/public/default-dynamic-security.json |
Revises default groups, roles, and ACL mappings. |
Review effort: Lite
|
The PR adds ACLs to existing roles; it does not introduce new role assignments. update_acls() already adds missing ACLs when the security version changes, preserving existing user/group assignments. Therefore, no additional group-membership migration is needed for these changes. |
* sort roles and acls * add missing permissions * increase security version * add ForecastConfiguration
check mosquitto ACLs against settings views
UI: openWB/openwb-ui-settings#1134