- 已装运
- 2026年9月25日 20:00 UTC
- 作者
- Kamo
- 提交
- 3453e1d
Master §11 'SP02 final fixes': a session whose intelligenceType is ARTIFICIAL resolves no platform right by any route (owner flag, god window, administrator row). SecurityService's PlatformRightsService also refuses the System User. AIService's two platform checks (the route table's PLATFORM_RIGHT rows and RegistryAuthz.requirePlatform for /api/ai/platform/**) called the shared resolver with the owner flag and god window only. AiCaller now reads intelligenceType (any case, trimmed) and exposes mayHoldPlatformRights(); the route table refuses an AI session unasked. Both checks go through one AiPlatformRights component: AI session -> no, then the shared resolver, then the user row (System User or missing -> no). SP01 final review I-2. Also corrects ResourceServerConfigTest's stale model-read assertion: since SP01 Task 19 (master §6.4) MANAGE_AI_SETTINGS reads /api/ai/models.