开发指南勘误与更新

权限控制章节修正（第 2.2 节）

⚠️ 关键勘误

在实际测试中发现，Shell 权限请求使用的是 fullCommandText 字段，而非文档中提到的 command 字段。

需要修改的代码行

第 89 行（错误）：

command = request.get("command", "")

应改为（正确）：

command = request.get("fullCommandText", "") or request.get("command", "")

完整的正确实现

async def on_user_permission_request(request, context):
    """
    统一权限审批网关
    """
    kind = request.get("kind")  # shell, write, mcp, read, url
    # ✅ 正确：使用 fullCommandText（shell）或 command（其他）
    command = request.get("fullCommandText", "") or request.get("command", "")

    # 1. 超级模式：全部允许
    if self.valves.PERMISSIONS_ALLOW_ALL:
        return {"kind": "approved"}

    # 2. 默认安全：始终允许 "读" 和 "Web浏览"
    if kind in ["read", "url"]:
        return {"kind": "approved"}

    # 3. 细粒度控制
    if kind == "shell":
        if self.valves.PERMISSIONS_ALLOW_SHELL:
            return {"kind": "approved"}
        
        pattern = self.valves.PERMISSIONS_SHELL_ALLOW_PATTERN
        if pattern and command:
            try:
                if re.match(pattern, command):
                    return {"kind": "approved"}
            except re.error:
                print(f"[Config Error] Invalid Regex: {pattern}")

    if kind == "write" and self.valves.PERMISSIONS_ALLOW_WRITE:
        return {"kind": "approved"}
        
    if kind == "mcp" and self.valves.PERMISSIONS_ALLOW_MCP:
        return {"kind": "approved"}

    # 4. 默认拒绝
    print(f"[Permission Denied] Blocked: {kind} {command}")
    return {
        "kind": "denied-by-rules", 
        "rules": [{"kind": "check-openwebui-valves"}]
    }

Shell 权限请求的完整结构

{
  "kind": "shell",
  "toolCallId": "call_xxx",
  "fullCommandText": "ls -la",                    // ← 关键字段
  "intention": "List all files and directories",
  "commands": [
    {
      "identifier": "ls -la",
      "readOnly": false
    }
  ],
  "possiblePaths": [],
  "possibleUrls": [],
  "hasWriteFileRedirection": false,
  "canOfferSessionApproval": false
}

测试验证

已通过完整测试套件验证（8/8 通过），详见 PERMISSION_TEST_REPORT.md。

更新日期: 2026-01-30
验证状态: ✅ 已测试
影响范围: 2.2 权限与确认章节

2.5 KiB Raw Blame History Unescape Escape