mirror of
https://github.com/instructkr/claw-code.git
synced 2026-10-17 00:00:05 +08:00
fix: use PermissionMode.covers() instead of comparison operators
The PermissionMode enum intentionally does not implement PartialOrd to prevent silent re-ranking of the privilege ladder. Use the explicit covers() method for privilege comparisons instead of < and >=.
This commit is contained in:
1 parent
8938f53790
commit
8a19ecd7cc
1 file changed
+2
-2
@@ -4234,12 +4234,12 @@ fn check_permission_health(permission_mode: PermissionModeProvenance) -> Diagnos
|
||||
let specs = mvp_tool_specs();
|
||||
let tools_satisfied = specs
|
||||
.iter()
|
||||
.filter(|spec| permission_mode.mode >= spec.required_permission)
|
||||
.filter(|spec| permission_mode.mode.covers(spec.required_permission))
|
||||
.map(|spec| spec.name)
|
||||
.collect::<Vec<_>>();
|
||||
let tools_gated = specs
|
||||
.iter()
|
||||
.filter(|spec| permission_mode.mode < spec.required_permission)
|
||||
.filter(|spec| !permission_mode.mode.covers(spec.required_permission))
|
||||
.map(|spec| spec.name)
|
||||
.collect::<Vec<_>>();
|
||||
|
||||
|
||||
Reference in new issue
Block a user