对应 permissions.rs:80-120 的 authorize() 核心逻辑: current >= required → 允许
(
tool: str,
required: PermissionMode,
current: PermissionMode,
)
| 765 | # 策略 3: 全权限——随便搞 |
| 766 | |
| 767 | def check_permission( |
| 768 | tool: str, |
| 769 | required: PermissionMode, |
| 770 | current: PermissionMode, |
| 771 | ) -> str: |
| 772 | """ |
| 773 | 对应 permissions.rs:80-120 的 authorize() |
| 774 | 核心逻辑: current >= required → 允许 |
| 775 | """ |
| 776 | if current >= required: |
| 777 | return "允许" |
| 778 | else: |
| 779 | return f"拒绝 (需要 {required.name}, 当前 {current.name})" |
| 780 | |
| 781 | tools = [ |
| 782 | ("read", PermissionMode.ReadOnly), |
no outgoing calls
no test coverage detected