feat: add role-based sidebar link visibility control

2026-03-01 18:17:45 +08:00
parent 20aa6f12a3
commit 7ab2ad41c4
7 changed files with 74 additions and 17 deletions
@@ -16,9 +16,9 @@ ROLE_GROUP_MAP = {

 DEFAULT_RBAC = {
    "role_defaults": {
-        "admin": {"pages": "*"},
-        "member": {"pages": ["dashboard", "docker", "files", "openclaw", "chat-digest"]},
-        "viewer": {"pages": ["dashboard"]},
+        "admin": {"pages": "*", "sidebar_links": "*"},
+        "member": {"pages": ["dashboard", "docker", "files", "openclaw", "chat-digest"], "sidebar_links": "*"},
+        "viewer": {"pages": ["dashboard"], "sidebar_links": ["dashboard"]},
    },
    "user_overrides": {},
 }
@@ -28,6 +28,7 @@ class User(BaseModel):
    username: str
    role: str
    pages: list | str  # "*" or list of page ids
+    sidebar_links: list | str = "*"  # "*" or list of sidebar link labels/ids


 def load_rbac() -> dict:
@@ -61,6 +62,14 @@ def get_pages(username: str, role: str) -> list | str:
    return rbac.get("role_defaults", {}).get(role, {}).get("pages", [])


+def get_sidebar_links(username: str, role: str) -> list | str:
+    rbac = load_rbac()
+    overrides = rbac.get("user_overrides", {})
+    if username in overrides and "sidebar_links" in overrides[username]:
+        return overrides[username]["sidebar_links"]
+    return rbac.get("role_defaults", {}).get(role, {}).get("sidebar_links", "*")
+
+
 def get_sidebar_order(username: str) -> dict | None:
    rbac = load_rbac()
    overrides = rbac.get("user_overrides", {})