rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Gate cookie banner policy regeneration on its own action

Browse Source 
RegenerateCookieBannerTrackerPolicy authorized against the generic
cookie-banner update action, conflating policy regeneration with banner
edits. Add a dedicated regenerate-policy action and authorize both the
console and MCP resolvers against it so the capability can be granted
independently.

Signed-off-by: Émile Ré <emile@probo.com>
This commit is contained in:
Émile Ré
2026-06-09 13:10:19 +02:00
parent ab3750fca4
commit 60a1b1c661
3 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/probo/actions.go
View File

@@ -391,6 +391,8 @@ const (
ActionCookieBannerActivate = "core:cookie-banner:activate" ActionCookieBannerActivate = "core:cookie-banner:activate"
ActionCookieBannerDeactivate = "core:cookie-banner:deactivate" ActionCookieBannerDeactivate = "core:cookie-banner:deactivate"
ActionCookieBannerRegeneratePolicy = "core:cookie-banner:regenerate-policy"
// CookieBannerVersion actions // CookieBannerVersion actions
ActionCookieBannerVersionGet = "core:cookie-banner-version:get" ActionCookieBannerVersionGet = "core:cookie-banner-version:get"
ActionCookieBannerVersionList = "core:cookie-banner-version:list" ActionCookieBannerVersionList = "core:cookie-banner-version:list"

2
pkg/server/api/console/v1/cookie_banner_resolvers.go
View File

@@ -779,7 +779,7 @@ func (r *mutationResolver) PublishCookieBannerVersion(ctx context.Context, input
// RegenerateCookieBannerTrackerPolicy is the resolver for the regenerateCookieBannerTrackerPolicy field. // RegenerateCookieBannerTrackerPolicy is the resolver for the regenerateCookieBannerTrackerPolicy field.
func (r *mutationResolver) RegenerateCookieBannerTrackerPolicy(ctx context.Context, input types.RegenerateCookieBannerTrackerPolicyInput) (*types.RegenerateCookieBannerTrackerPolicyPayload, error) { func (r *mutationResolver) RegenerateCookieBannerTrackerPolicy(ctx context.Context, input types.RegenerateCookieBannerTrackerPolicyInput) (*types.RegenerateCookieBannerTrackerPolicyPayload, error) {
scope, err := r.authorize(ctx, input.CookieBannerID, probo.ActionCookieBannerUpdate) scope, err := r.authorize(ctx, input.CookieBannerID, probo.ActionCookieBannerRegeneratePolicy)
if err != nil { if err != nil {
return nil, err return nil, err
} }

2
pkg/server/api/mcp/v1/schema.resolvers.go
View File

@@ -5826,7 +5826,7 @@ func (r *Resolver) PublishCookieBannerVersionTool(ctx context.Context, req *mcp.
} }
func (r *Resolver) RegenerateCookieBannerTrackerPolicyTool(ctx context.Context, req *mcp.CallToolRequest, input *types.RegenerateCookieBannerTrackerPolicyInput) (*mcp.CallToolResult, types.RegenerateCookieBannerTrackerPolicyOutput, error) { func (r *Resolver) RegenerateCookieBannerTrackerPolicyTool(ctx context.Context, req *mcp.CallToolRequest, input *types.RegenerateCookieBannerTrackerPolicyInput) (*mcp.CallToolResult, types.RegenerateCookieBannerTrackerPolicyOutput, error) {
scope, err := r.Authorize(ctx, input.CookieBannerID, probo.ActionCookieBannerUpdate) scope, err := r.Authorize(ctx, input.CookieBannerID, probo.ActionCookieBannerRegeneratePolicy)
if err != nil { if err != nil {
return nil, types.RegenerateCookieBannerTrackerPolicyOutput{}, err return nil, types.RegenerateCookieBannerTrackerPolicyOutput{}, err
} }