Skip to content

Adjusting permissions for osctrl-mcp operations - #1027

Merged
javuto merged 1 commit into
developfrom
mcp-permissions-change
Sep 4, 2026
Merged

Adjusting permissions for osctrl-mcp operations#1027
javuto merged 1 commit into
developfrom
mcp-permissions-change

Conversation

@javuto

@javuto javuto commented Sep 4, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Raised node posture endpoints to require AdminLevel, matching node detail access.
  • Added regression coverage that UserLevel users receive 403 from both posture endpoints.
  • Updated the hosted MCP authorization comment to reflect the stricter posture permission.

@javuto javuto added 🔐 security Security related issues osctrl-mcp osctrl-mcp related changes 🔐 permissions Permissions related issues labels Sep 4, 2026
@javuto
javuto merged commit 84ab6d3 into develop Sep 4, 2026
7 checks passed
@javuto
javuto deleted the mcp-permissions-change branch September 4, 2026 21:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

osctrl-mcp osctrl-mcp related changes 🔐 permissions Permissions related issues 🔐 security Security related issues

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant