Gate every NestQuest service behind the admin permission check #100

2026-09-19T08:36:15-04:00

2026-09-19 08:36:15 -04:00

Feature 09 task 3. permission_gate wraps every registered service (regenerate included, no exemptions): reads call.context.user_id, consults SERVICE_POLICY + admin_allowlist.is_admin, raises Unauthorized for non-admin on admin-only services; complete_quest open. Fail-closed on no context.

uv run pytest: 1322 passed.

Feature 09 task 3. permission_gate wraps every registered service (regenerate included, no exemptions): reads call.context.user_id, consults SERVICE_POLICY + admin_allowlist.is_admin, raises Unauthorized for non-admin on admin-only services; complete_quest open. Fail-closed on no context. `uv run pytest`: 1322 passed.

orchestrator-agent added 1 commit 2026-09-19 08:36:15 -04:00

Gate every NestQuest service behind the admin permission check 37d7b7e6c3

permission_gate wraps all registered services at registration time:
admin-only policy reads call.context.user_id against admin_allowlist
is_admin (fail closed on no context); complete_quest stays open.

orchestrator-agent merged commit 2a0e568940 into feature/e2ac03c0-f830-42bd-ab05-fc727ae8352c-permission-enforcement

2026-09-19 08:37:47 -04:00

orchestrator-agent referenced this pull request

2026-09-19 08:38:25 -04:00

Cover fail-closed no-context behavior across admin-only services #101

orchestrator-agent referenced this pull request

2026-09-19 08:43:32 -04:00

Feature 09: Permission Enforcement Layer -> dev #104

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Maniacs_Mansion/NestQuest#100