feat(api-tokens): split inventory scope out of server scope

Surface the new nezha:inventory:{read,delete,*} scopes that gate listing
and deleting servers/server-groups, separate from nezha:server:* which now
covers per-server runtime operations. Refine server-scope descriptions to
match the backend split.
This commit is contained in:
naiba
2026-05-31 15:10:03 +00:00
parent 7057aa3098
commit 66e20c3860
+7 -4
View File
@@ -47,11 +47,14 @@ export const deleteApiToken = async (id: number): Promise<void> => {
} }
export const SCOPE_OPTIONS = [ export const SCOPE_OPTIONS = [
{ value: "nezha:server:read", label: "Server: read", desc: "List & inspect servers and files" }, { value: "nezha:inventory:read", label: "Inventory: read", desc: "List servers & groups (server.list)" },
{ value: "nezha:server:write", label: "Server: write", desc: "Edit servers, push files" }, { value: "nezha:inventory:delete", label: "Inventory: delete", desc: "Delete servers & server groups" },
{ value: "nezha:server:delete", label: "Server: delete", desc: "Delete servers, files" }, { value: "nezha:inventory:*", label: "Inventory: all", desc: "List + delete servers & groups" },
{ value: "nezha:server:read", label: "Server: read", desc: "Inspect a server, read files & metrics (needs server id)" },
{ value: "nezha:server:write", label: "Server: write", desc: "Edit a server, push files" },
{ value: "nezha:server:delete", label: "Server: delete", desc: "Delete files on a server" },
{ value: "nezha:server:exec", label: "Server: exec", desc: "Run shell commands on servers" }, { value: "nezha:server:exec", label: "Server: exec", desc: "Run shell commands on servers" },
{ value: "nezha:server:*", label: "Server: all", desc: "Every server permission (read+write+delete+exec)" }, { value: "nezha:server:*", label: "Server: all", desc: "Every server operation (read+write+delete+exec)" },
{ value: "nezha:service:read", label: "Service monitor: read", desc: "List service monitors & history" }, { value: "nezha:service:read", label: "Service monitor: read", desc: "List service monitors & history" },
{ value: "nezha:service:write", label: "Service monitor: write", desc: "Create / edit service monitors" }, { value: "nezha:service:write", label: "Service monitor: write", desc: "Create / edit service monitors" },
{ value: "nezha:service:delete", label: "Service monitor: delete", desc: "Delete service monitors" }, { value: "nezha:service:delete", label: "Service monitor: delete", desc: "Delete service monitors" },