christian/rmm2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: agent permission erlaubt firmware + agents endpoints fuer rmm-updater OTA

Browse Source
This commit is contained in:
cynfo3000 2026-03-10 01:08:14 +01:00
parent 1923b28fa2
commit 1c7c82dfac
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
backend/api/middleware.go
View File

@ -129,10 +129,13 @@ func hasAPIKeyPermission(key *db.APIKey, r *http.Request) bool {
switch perm { switch perm {
case "agent": case "agent":
// Nur Agent-Endpunkte: Registrierung, WS-Connect, Heartbeat // Agent-Endpunkte: Registrierung, WS-Connect, Heartbeat, OTA-Update
return path == "/api/v1/agent/ws" || return path == "/api/v1/agent/ws" ||
path == "/api/v1/agent/heartbeat" || path == "/api/v1/agent/heartbeat" ||
path == "/api/v1/agent/register" path == "/api/v1/agent/register" ||
path == "/api/v1/firmware" ||
path == "/api/v1/firmware/download" ||
strings.HasPrefix(path, "/api/v1/agents/")
case "read": case "read":
// Nur GET-Requests, keine destruktiven Aktionen // Nur GET-Requests, keine destruktiven Aktionen