feat: Add granular role-based permissions system with Entra ID integration

Browse source

- Implement RBAC with viewer/editor/owner roles using bitwise permissions
      - Add AccessRole, AclEntry, and Group models for permission management
      - Create PermissionService for core permission logic and validation
      - Integrate Microsoft Graph API for Entra ID user/group search
      - Add middleware for resource access validation with custom ID resolvers
      - Implement bulk permission updates with transaction support
      - Create permission management UI with people picker and role selection
      - Add public sharing capabilities for resources
      - Include database migration for existing agent ownership
      - Support hybrid local/Entra ID identity management
      - Add comprehensive test coverage for all new services

chore: Update @librechat/data-schemas to version 0.0.9 and export common module in index.ts

fix: Update userGroup tests to mock logger correctly and change principalId expectation from null to undefined

...

This commit is contained in:

Danny Avila 2025-06-09 15:48:10 -04:00

parent fa54c9ae90

commit eed43e6662

No known key found for this signature in database

GPG key ID: BF31EEB2C5CA0956

88 changed files with 9992 additions and 539 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1058

api/server/services/PermissionService.spec.js Normal file

View file

File diff suppressed because it is too large Load diff