michal/mcpctl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
110 Commits 44 Branches 0 Tags
c6fab132aa7dea56a79a400e07b9227da69897e2
Commit Graph

1 Commits

Author SHA1 Message Date
Michal
f0faa764e2 fix: RBAC name-scoped access — CUID resolution + list filtering 
Two bugs fixed:
- GET /api/v1/servers/:cuid now resolves CUID→name before RBAC check,
  so name-scoped bindings match correctly
- List endpoints now filter responses via preSerialization hook using
  getAllowedScope(), so name-scoped users only see their resources

Also adds fulldeploy.sh orchestrator script.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-23 12:26:37 +00:00