Gate every NestQuest service behind the admin permission check #100

Merged

orchestrator-agent merged 1 commits from task/implement-permission-decorator_d17696e6-763b-41e7-a8d4-c621a52a7f7b into feature/e2ac03c0-f830-42bd-ab05-fc727ae8352c-permission-enforcement

2026-09-19 08:37:47 -04:00

Author	SHA1	Message	Date
orchestrator-agent	37d7b7e6c3	Gate every NestQuest service behind the admin permission check permission_gate wraps all registered services at registration time: admin-only policy reads call.context.user_id against admin_allowlist is_admin (fail closed on no context); complete_quest stays open.	2026-09-19 08:36:14 -04:00

Author

SHA1

Message

Date

orchestrator-agent

37d7b7e6c3

Gate every NestQuest service behind the admin permission check

permission_gate wraps all registered services at registration time:
admin-only policy reads call.context.user_id against admin_allowlist
is_admin (fail closed on no context); complete_quest stays open.

2026-09-19 08:36:14 -04:00