obsidian-enterprise-rbac

Implement team vault access patterns and role-based controls. Use when managing shared vaults, implementing access controls, or building team collaboration features for Obsidian. Trigger with phrases like "obsidian team", "obsidian access control", "obsidian enterprise", "shared vault permissions".

Aller à l'installation

Dépôt: jeremylongshore/claude-code-plugins-plus-skills
Dernière activité de la source: 17 juillet 2026 à 22:18
Langue détectée de SKILL.md: anglais
Étoiles: 2 604
Forks: 378

Options d'installation

Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.

npx skills add https://github.com/jeremylongshore/claude-code-plugins-plus-skills --skill obsidian-enterprise-rbac

La commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.

Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.

Vérifiez les fichiers source

Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.

Explorateur de fichiers

2 fichiers

SKILL.md

Instructions source · Aperçu en lecture seule

Retour à la recherche Retour à l’installation

clerk-core-workflow-a

Implement user sign-up and sign-in flows with Clerk. Use when building authentication UI, customizing sign-in experience, or implementing OAuth social login. Trigger with phrases like "clerk sign-in", "clerk sign-up", "clerk login flow", "clerk OAuth", "clerk social login".

2026-07-23

clerk-core-workflow-b

Implement session management and middleware with Clerk. Use when managing user sessions, configuring route protection, or implementing token refresh and custom JWT templates. Trigger with phrases like "clerk session", "clerk middleware", "clerk route protection", "clerk token", "clerk JWT".

2026-07-23

clerk-enterprise-rbac

Configure enterprise SSO, role-based access control, and organization management. Use when implementing SSO integration, configuring role-based permissions, or setting up organization-level controls. Trigger with phrases like "clerk SSO", "clerk RBAC", "clerk enterprise", "clerk roles", "clerk permissions", "clerk organizations".

2026-07-23

Tout voir dans ce dépôt

name	obsidian-enterprise-rbac
description	Implement team vault access patterns and role-based controls. Use when managing shared vaults, implementing access controls, or building team collaboration features for Obsidian. Trigger with phrases like "obsidian team", "obsidian access control", "obsidian enterprise", "shared vault permissions".
allowed-tools	Read, Write, Edit
version	1.13.0
license	MIT
author	Jeremy Longshore <jeremy@intentsolutions.io>
tags	["saas","obsidian","obsidian-enterprise"]
compatibility	Designed for Claude Code, also compatible with Codex and OpenClaw

Obsidian Enterprise RBAC

Overview

Vault-level access control patterns for Obsidian in team environments. Covers folder-based permissions via .obsidian-permissions files, read-only enforcement for shared vaults, plugin allowlisting, and configuration lockdown through restricted mode.

Prerequisites

Obsidian desktop app with a shared/synced vault
Understanding of Obsidian's .obsidian/ configuration directory
A sync mechanism in place (Git, Obsidian Sync, or shared filesystem)
Node.js 18+ for scripted permission enforcement

Instructions

Step 1: Define a Permission Model

Create .obsidian-permissions at the vault root. This JSON file maps roles to folder access:

{
  "version": 1,
  "roles": {
    "admin": {
      "folders": ["*"],
      "permissions": ["read", "write", "delete", "manage"]
    },
    "editor": {
      "folders": ["projects/*", "shared/*",

import { Plugin, TFile, Notice } from 'obsidian'; interface PermissionConfig { version: number; roles: Record<string, { folders: string[]; permissions: string[] }>; users: Record<string, string>; } export default class RBACPlugin extends Plugin { private config: PermissionConfig | null = null; private currentUser: string = ''; async onload() { await this.loadPermissions(); // Intercept file modifications this.registerEvent( this.app.vault.on('modify', (file) => { if (!this.canWrite(file.path)) { new Notice(`Permission denied: ${file.path} is read-only for your role`); } }) ); // Intercept file creation this.registerEvent( this.app.vault.on('create', (file) => { if (file instanceof TFile && !this.canWrite(file.parent?.path ?? '/')) { new Notice(`Permission denied: cannot create files in ${file.parent?.path}`); // Move to user's writable area or delete this.app.vault.delete(file); } }) ); } private async loadPermissions() { const permFile = this.app.vault.getAbstractFileByPath('.obsidian-permissions'); if (permFile instanceof TFile) { const content = await this.app.vault.read(permFile); this.config = JSON.parse(content); } // Identify current user from plugin settings or environment const data = await this.loadData(); this.currentUser = data?.userEmail ?? ''; } private canWrite(path: string): boolean { if (!this.config || !this.currentUser) return true; // Fail open if no config const role = this.config.users[this.currentUser]; if (!role) return false; const roleDef = this.config.roles[role]; if (!roleDef) return false; if (!roleDef.permissions.includes('write')) return false; return roleDef.folders.some(pattern => { if (pattern === '*') return true; const regex = new RegExp('^' + pattern.replace(/\*/g, '.*') + '$'); return regex.test(path); }); } }

Issue	Cause	Solution
Permission denied on all files	User email not set in plugin settings	Open RBAC plugin settings, enter your email
Allowlist keeps resetting	Non-admin edited `community-plugins.json`	Only admins can modify; check audit log
Config hash mismatch on every load	Config changed legitimately	Admin runs `lockdownConfigs()` to update hashes
Plugin not intercepting writes	Event handler registration failed	Check console for plugin load errors
Sync conflicts on `.obsidian-permissions`	Multiple admins editing simultaneously	Use Git with merge strategy or Obsidian Sync

obsidian-enterprise-rbac

Options d'installation

Vérifiez les fichiers source

Obsidian Enterprise RBAC

Overview

Prerequisites

Instructions

Step 1: Define a Permission Model

Obsidian Enterprise RBAC

Overview

Prerequisites

Instructions

Step 1: Define a Permission Model

Step 2: Build the Permission Checker Plugin

Step 3: Enforce Read-Only Mode on Shared Vaults

Step 4: Plugin Allowlisting

Step 5: Configuration Lockdown via Restricted Mode

Output

Error Handling

Examples

Resources

Next Steps

obsidian-enterprise-rbac

Informations de source

Options d'installation

Vérifiez les fichiers source

Plus depuis ce dépôt

Plus depuis ce dépôt

Obsidian Enterprise RBAC

Overview

Prerequisites

Instructions

Step 1: Define a Permission Model

Obsidian Enterprise RBAC

Overview

Prerequisites

Instructions

Step 1: Define a Permission Model

Step 2: Build the Permission Checker Plugin

Step 3: Enforce Read-Only Mode on Shared Vaults

Step 4: Plugin Allowlisting

Step 5: Configuration Lockdown via Restricted Mode

Output

Error Handling

Examples

Resources

Next Steps