fix(hub): prevent readonly users listing tokens of their shared systems via api

This commit is contained in:
henrygd
2026-09-08 09:57:58 -04:00
parent 5b87f7d7cb
commit e39e153ca0
2 changed files with 6 additions and 6 deletions

View File

@@ -99,8 +99,8 @@ func setCollectionAuthSettings(app core.App) error {
}
if err := applyCollectionRules(app, []string{"fingerprints"}, collectionRules{
list: &systemScopedReadRule,
view: &systemScopedReadRule,
list: &systemScopedWriteRule,
view: &systemScopedWriteRule,
create: &systemScopedWriteRule,
update: &systemScopedWriteRule,
delete: &systemScopedWriteRule,