Skip to content

Apply network permissions from registry #1041

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 14, 2025

Conversation

eleftherias
Copy link
Member

  • Remove the default "network" value from the CLI
  • Consolidate override logic into a single function
  • Default to "network" permissions only if there is no permission profile set and there is no default profile in the registry

Fix #1008

- Remove the default "network" value from the CLI
- Consolidate override logic into a single function
- Default to "network" permissions only if there is no permission profile set and there is no default profile in the registry

Fix #1008
@eleftherias eleftherias force-pushed the fix-network-isolation-default branch from c32f08a to a42173e Compare July 11, 2025 16:33
@eleftherias
Copy link
Member Author

@danbarr Could you give this a try? I tested it with:

  • custom permissions profile
  • empty permissions profile
  • restarting the server
    But I'd still like another pair of eyes.

@danbarr
Copy link
Collaborator

danbarr commented Jul 11, 2025

@eleftherias This is working great! I ran a few tests, including some servers like time which have a fully-restricted policy in the registry (equivalent to the none profile), and they're being applied as expected.

@eleftherias eleftherias merged commit da7f19e into main Jul 14, 2025
18 checks passed
@eleftherias eleftherias deleted the fix-network-isolation-default branch July 14, 2025 08:58
rvarun11 pushed a commit to rvarun11/toolhive that referenced this pull request Jul 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Network permissions in registry are not applied
3 participants