Voice · Permissions

V

6 modules · 22 exports · 1 repository · 0 e2e tests · 4 routes

OverviewModulesRepositoriesPermissionsSearch params & storage

Who may do what in Voice: the per-object permissions it builds with every place checking them, and the checks in its code. See Permissions for how authorization works and the reference for every role and feature.

Outside the system

Reading x.permissions.NAME directly skips hasPermission and with it the admin bypass, and authorizing an action on an object with isAdmin and friends is a bug. Some of these are deliberate, the permissions doc lists the boundaries.

• read directly in app/features/voice/core/VoiceAccess.ts:19 return room.permissions.POST.includes(userId);
• read directly in app/features/voice/core/VoiceAccess.ts:23 return canJoin(room, userId) && room.permissions.OBSERVE.includes(userId);
• isAdmin in app/features/voice/voice-utils.server.ts:6 if (!isAdmin(user) && !isDev(user)) {
• isDev in app/features/voice/voice-utils.server.ts:6 if (!isAdmin(user) && !isDev(user)) {