feat: MCP: 运营数据MCP权限访问控制优化,特定业务授权访问 --story=135844616 - #11374
Open
EASYGOING45 wants to merge 1 commit into
Open
Conversation
运营数据为平台总量，但鉴权按调用方传入的 bk_biz_id 校验，导致用户只要在自有业务上 拥有 using_operation_mcp 权限即可解锁全平台运营数据。新增全局配置 OPERATION_MCP_AUTH_BIZ_ID， 配置(>0)后运营 MCP 忽略调用方传入的 bk_biz_id，统一在该固定运营业务上做 IAM 校验； 未配置时保持原行为并打醒目告警提示越权风险。 Co-authored-by: Cursor <cursoragent@cursor.com> # Reviewed, transaction id: 82877
EASYGOING45
added
feat
|
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.