lorentz/wulf-pulse
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

feat(20-02): grant phishing approve+remediate to admin roles (D-02)

Browse source 
- superAdminRole and adminRole now include "approve" and "remediate" for phishing
- userRole unchanged (still read-only)
This commit is contained in:
lorentz 2026-07-16 10:43:18 -04:00
parent 4b3188da33
commit 80e7129740
1 changed files with 3 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

7
lib/permissions.ts
View file

@ -29,8 +29,7 @@ export const statement = {
// Datto RMM Overshell evidence (Phase 4.2 — read jobs / execute scripts) // Datto RMM Overshell evidence (Phase 4.2 — read jobs / execute scripts)
rmm: ["read", "execute"], rmm: ["read", "execute"],
// Phishing triage campaigns/reports (Phase 18 — D-05: full vocabulary now; // Phishing triage campaigns/reports (Phase 18 — D-05: full vocabulary)
// approve/remediate ungranted to any role until Phase 20)
phishing: ["read", "analyze", "approve", "remediate"], phishing: ["read", "analyze", "approve", "remediate"],
} as const; } as const;
@ -48,7 +47,7 @@ export const superAdminRole = ac.newRole({
settings: ["read", "update"], settings: ["read", "update"],
itglue: ["read", "write"], itglue: ["read", "write"],
rmm: ["read", "execute"], rmm: ["read", "execute"],
phishing: ["read", "analyze"], // approve/remediate ungranted until Phase 20 phishing: ["read", "analyze", "approve", "remediate"],
}); });
// Admin role - access to admin panel and user management, but not role management // Admin role - access to admin panel and user management, but not role management
@ -62,7 +61,7 @@ export const adminRole = ac.newRole({
settings: ["read"], settings: ["read"],
itglue: ["read", "write"], itglue: ["read", "write"],
rmm: ["read", "execute"], rmm: ["read", "execute"],
phishing: ["read", "analyze"], phishing: ["read", "analyze", "approve", "remediate"],
}); });
// User role - basic access // User role - basic access