KamoCRM

An order lends only the rights the called tool needs (No Insubordination Rule, IoT R7 round 3)

FeatureSecurityService
Shipped
October 19, 2026 at 1:38 AM UTC
Author
Kamo
Commit
58dac78

POST **************** takes an optional neededRights (RoleRightType names; an unknown one is a right nobody holds). With it, OrderDelegationService.lend borrows only (neededRights, with the ancestors each needs to survive the hierarchy closure) of the requester's rights, less the SI's own, the SI floor (AiRightsFloor) and the SI's explicit NUKEs, and mints the order-scoped session even when nothing is borrowed: its delegation block (requesterMemberId, orderRef) is what IoTService weighs the order by. The answer says scoped:true; the audit line names the needed rights. Without neededRights (the Tool Plane's tools/list) the whole standing is lent, as before. The SI's stops, SELF and the requester checks are unchanged.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing