poimen-memory/config/roles/admin.yaml at main - poimen-memory - Gitea: Git with a cup of tea

rock/poimen-memory

Files

T

rock dae9483a6a feat(rbac): complete HTTP endpoint integration + role configs

HTTP Endpoints with RBAC:
- ingest_handler: project-level write access check
- learn_handler: project-level write access check
- projects_handler: filter returned projects by user access
- query_handler: filter search results by resource access
- context_handler: project-level read access check

Example Role Configurations (config/roles/):
- admin.yaml: full access to all resources
- portfolio-agent.yaml: public visitor access
- authenticated-user.yaml: logged-in user access
- homelab-team.yaml: team-scoped project access

All 660+ tests passing.

2026-09-01 08:43:49 -07:00

9 lines

229 B

YAML

Raw Permalink Blame History

 # Admin role: full access to all resources
 name: admin
 description: Full administrative access to all resources
 rules:
   - resources: ["*"]
     verbs: [read, write, delete, query]
     # No scope restrictions - access everything