Comments (2)
timkinnane
commented on June 3, 2024
Copy pasta from #2 because it seems to relate more here:
Maybe a permissions layer (which could be quite simple for now) should be considered for this type of thing, to keep instance owners informed of security risks when installing Rocketlets, then we don't have to be overly protective and limiting. Similar to permissions for users, but implemented like adding a facebook app, e.g.
This Rockelet can
modify user roles
modify messages
The above could have some correlation to the internal API endpoints used in the Rocketlet source.
from rocket.chat.apps-engine.
d-gubert
commented on June 3, 2024
Closing this issue as it doesn't reflect the current state of the project anymore.
We are currently planning how the permission system will work and should be starting development in the next weeks.
from rocket.chat.apps-engine.
Related Issues (20)
- feature: Add enable and disable job method for scheduled processors
- Configured environment is not supported yet HOT 3
- Unable to allow for a multiline string via ISetting.
- Configuring logging levels in Apps engine applications
- [Enchancement] ClientSecret Input Under App Settings Must be of SettingType Password HOT 1
- Expect editedBy name
- Reactions field inconsistency
- Iframe interface not available in PreviewBlock in ui-kit
- [BUG] getDirectByUsernames and Creation of Direct Room returning general channel instead expected direct room by usernames
- [BUG] getDirectByUsernames and Creation of Direct Room returning general channel instead expected direct room by usernames HOT 2
- VM2 got security issue and have been discontinued
- IPostUserDeleted definition uses AppMethod.EXECUTE_POST_USER_CREATED HOT 1
- IHttp won't work in the app implement IPreMessageSentModify
- Allow custom ignore from walkDirectory in getAppSource
- IRoomBuilder setDisplayingOfSystemMessages wrong type
- Migrate to new FCM API v1 from GCM
- Registered button in Livechat room is not visible HOT 1
- Allow using the user created by the Apps Engine to perform Rest request
- URL is not defined in HOT 2
- The getBlockBuilder method is deprecated HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from rocket.chat.apps-engine.