security: defense-in-depth auth checks for all MCP write tools and REST endpoints
- MCP issues: add _require_public_or_write_access to create_issue, create_issue_comment; add _require_write_access + actor param to update_issue - MCP proposals: add _require_public_or_write_access to create_proposal, create_proposal_comment - MCP repos: guard create_repo against empty owner_user_id (unauthenticated callers) - REST webhooks: add _guard_repo_owner to redeliver_delivery (was auth-only, not authz) - REST labels: add _guard_repo_owner to assign_labels_to_proposal and remove_label_from_proposal (were scope-only, no repo-level ownership check) - Dispatcher: pass actor=user_id to execute_update_issue (was missing) - Tests: 20+ new auth tests covering forbidden paths for all affected executors
sha256:b52c6cbdd7835160038c284ec5ab828b8c999530f1913d4e17110acbbc153eab
sha
sha256:14500c2377a9d71e8040d1ef6493ab0a02945944d3dffc33abe458eda8da04b3
snapshot
0 comments
To add a comment, use the Muse CLI:
muse hub commit comment sha256:b52c6cbdd7835160038c284ec5ab828b8c999530f1913d4e17110acbbc153eab --body "your comment"
No comments yet. Be the first to start the discussion.