System account bypass RBAC (#10306)

Signed-off-by: Denis Bykhov <bykhov.denis@gmail.com>
This commit is contained in:
Denis Bykhov
2025-12-18 00:40:07 +05:00
committed by GitHub
parent 044d4d195d
commit 44b9bb2d96
@@ -171,6 +171,7 @@ export class SpacePermissionsMiddleware extends BaseMiddleware implements Middle
isSpace: boolean
): boolean {
const account = ctx.contextData.account
if (account.primarySocialId === core.account.System) return true
const permissions = this.permissionsBySpace[space]?.[account.uuid] ?? []
let withoutMatch: Permission | undefined
for (const permission of permissions) {