Skip to content

Method-level authorization (--allow/--deny) #23

Description

@mark-e-deyoung

Problem

--read-only is a blunt on/off switch. No way to allow window.listTop
but deny process.kill, or allow clipboard.write for one agent but not
another.

Proposed Solution

Add --allow <method-list> and --deny <method-list> flags.
--allow takes precedence if both list the same method.
Default (empty) = all methods allowed.

References

  • Security audit item 8

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions