wangheng/xiaoqu_mcp_service
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[security] 收紧 MCP 数据权限并移除默认凭据 #1

Merged
wangheng merged 1 commits from fix/mcp-security-hardening into main 2026-09-03 14:42:53 +08:00
Conversation 0 Commits 1 Files Changed 11
+470 -86
wangheng commented 2026-09-03 14:42:36 +08:00
Owner
Copy Link
Copy Source

What

收紧代理商精确 ID 查询和权限配置异常时的数据访问；移除默认 dev profile、默认数据库凭据及固定测试 AK；补充安全回归测试。

Why

避免行级数据越权、权限配置异常时放宽数据范围，以及仓库内固定凭据泄露。

Verification

17 tests passed.

## What 收紧代理商精确 ID 查询和权限配置异常时的数据访问；移除默认 dev profile、默认数据库凭据及固定测试 AK；补充安全回归测试。 ## Why 避免行级数据越权、权限配置异常时放宽数据范围，以及仓库内固定凭据泄露。 ## Verification 17 tests passed.
wangheng added 1 commit 2026-09-03 14:42:36 +08:00
fix(security): 收紧 MCP 数据权限并移除默认凭据 e501afe292
wangheng merged commit b44fa9a86a into main 2026-09-03 14:42:53 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
shumeng wangheng
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: wangheng/xiaoqu_mcp_service#1