nocobase-acl-manage

Task-driven ACL governance through nb CLI for role lifecycle, global role mode, permission policy, user-role membership, and risk assessment. Use when users describe business permission outcomes instead of raw command arguments.

インストールへ移動

リポジトリ: Agents-Store/claude-plugins
ソースの最終更新活動: 2026年5月11日 16:59
検出された SKILL.md の言語: 英語
スター: 0
フォーク: 0

インストール方法

デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。

Codex または Claude でインストールこの Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。

直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。

npx skills add https://github.com/Agents-Store/claude-plugins --skill nocobase-acl-manage

コマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。

ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。

ソースファイルを確認

インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。

ファイルエクスプローラー

17 ファイル

SKILL.md

ソースの指示 · 読み取り専用プレビュー

検索に戻るインストールに戻る

Non-Goals

Do not bypass CLI by calling direct REST endpoints.

Do not mutate ACL through ad-hoc database operations.

Do not create temporary script files to execute ACL writes.

Do not invoke other skills for env/plugin bootstrap; use direct nb commands in this skill.

Do not hide high-impact blast radius (global mode, broad snippets, broad strategy actions).

Do not claim one-click coverage for workflows that require governance review.

Canonical Task Model

A) Role Domain

Task

User Outcome

Required Inputs

Optional Inputs

role.audit-all

list all roles with comparable policy summary

none

data_source_key, output

role.create-blank

create a role with default read-only baseline (single creation mode)

role_name

role_title, description, hidden, allow_configure, allow_new_menu

role.compare

explain differences between roles

role_names[]

data_source_key, output

B) Global Role-Mode Domain

Task

Non-Goals

Do not bypass CLI by calling direct REST endpoints.

Do not mutate ACL through ad-hoc database operations.

Do not create temporary script files to execute ACL writes.

Do not invoke other skills for env/plugin bootstrap; use direct nb commands in this skill.

Do not hide high-impact blast radius (global mode, broad snippets, broad strategy actions).

Do not claim one-click coverage for workflows that require governance review.

Canonical Task Model

A) Role Domain

Task

User Outcome

Required Inputs

Optional Inputs

role.audit-all

list all roles with comparable policy summary

none

data_source_key, output

role.create-blank

create a role with default read-only baseline (single creation mode)

role_name

role_title, description, hidden, allow_configure, allow_new_menu

role.compare

explain differences between roles

role_names[]

data_source_key, output

B) Global Role-Mode Domain

Task

name	nocobase-acl-manage
description	Task-driven ACL governance through nb CLI for role lifecycle, global role mode, permission policy, user-role membership, and risk assessment. Use when users describe business permission outcomes instead of raw command arguments.
argument-hint	[task: role.\|global.role-mode.\|permission.\|user.\|risk.*] [target?] [data_source_key?] [strict_mode?]
allowed-tools	shell, local file reads
owner	platform-tools
version	2.5.3
last-reviewed	"2026-04-23T00:00:00.000Z"
risk-level	high

name	nocobase-acl-manage
description	Task-driven ACL governance through nb CLI for role lifecycle, global role mode, permission policy, user-role membership, and risk assessment. Use when users describe business permission outcomes instead of raw command arguments.
argument-hint	[task: role.\|global.role-mode.\|permission.\|user.\|risk.*] [target?] [data_source_key?] [strict_mode?]
allowed-tools	shell, local file reads
owner	platform-tools
version	2.5.3
last-reviewed	"2026-04-23T00:00:00.000Z"
risk-level	high

`global.role-mode.get`	read current global role mode	none	`output`
`global.role-mode.set`	switch global role mode	`role_mode`	`strict_mode`

Task	User Outcome	Required Inputs	Optional Inputs
`permission.system-snippets.set`	set role-level system snippets	`role_name`, (`snippet_preset` or `snippets`)	none
`permission.route.desktop.set`	set desktop route permissions for a role	`role_name`, `route_ids[]`	`set_mode` (`set` or `add` or `remove`)
`permission.data-source.global.set`	set global strategy actions for all tables in one data source	`role_name`, `global_actions[]`	`data_source_key`
`permission.data-source.resource.set`	set independent actions for one or more collections	`role_name`, (`collection_hint` or `collection_hints[]`), `actions[]`	`data_source_key`, `fields_map`, `scope_map`, `resource_scope` (`all` by default)
`permission.scope.manage`	create/update/list reusable scopes	`scope_task`	`data_source_key`, `scope_id`, `scope_payload`

Task	User Outcome	Required Inputs	Optional Inputs
`user.assign-role`	assign one role to one or many users	`role_name`, (`user_ids[]` or `user_filter`)	`allow_generic_association_write`
`user.unassign-role`	remove one role from one or many users	`role_name`, (`user_ids[]` or `user_filter`)	`allow_generic_association_write`
`user.audit-role-membership`	inspect users bound to roles	(`role_name` or `user_id`)	`output`

nocobase-acl-manage

インストール方法

ソースファイルを確認

Goal

Scope

Non-Goals

Canonical Task Model

A) Role Domain

B) Global Role-Mode Domain

Goal

Scope

Non-Goals

Canonical Task Model

A) Role Domain

B) Global Role-Mode Domain

C) Permission Domain

D) User Domain

E) Risk Domain

Input Contract

Mandatory Clarification Gate

Workflow

Tooling Policy

Safety Gate

Capability Boundary Messaging

Verification Checklist

Minimal Test Scenarios

Reference Loading Map

References

Task	User Outcome	Required Inputs	Optional Inputs
`risk.assess-role`	risk score and rationale for one role	`role_name`	`data_source_key`, `output`
`risk.assess-user`	risk score based on user-role-permission relationship	`user_id`	`data_source_key`, `output`
`risk.assess-system`	system-level ACL governance risk summary	none	`data_source_key`, `output`

Input	Required	Default	Validation	Clarification Question
`task`	yes	none	one of canonical tasks or alias	"Which ACL governance task should run?"
`role_name`	conditional	none	role exists for update/audit tasks; write tasks normalize to `r_*` uid	"Which role should be targeted?"
`role_mode`	conditional	none	one of `default/allow-use-union/only-use-union`	"Which global role mode should be set?"
`collection_hint` / `collection_hints[]`	conditional	none	required for `permission.data-source.resource.set`; business name/keyword input is allowed	"Which business table(s) should be configured?"
`resolved_collection_names[]`	conditional	runtime resolved	required before write for `permission.data-source.resource.set`; each collection must exist in selected data source	"I found these matching collections. Which should be used?"
`actions[]`	conditional	none	required for `permission.data-source.resource.set`	"Which actions should be granted on these collections?"
`resource_scope`	no	`all`	one of `all` / `own` / `custom(scope_id or scope_filter)`	"Which data scope should be used? Default is all; choose own/custom only when needed."
`data_source_key`	no	`main`	must exist at runtime	"Which data source key should be used? (default: main)"
`strict_mode`	no	`safe`	`safe` or `fast`	"Use safe mode with full readback?"
`allow_generic_association_write`	no	`false`	boolean	"Allow guarded generic association writes for user-role assignment?"
`output`	no	`text+matrix`	`text`, `text+matrix`, `text+evidence`	"How detailed should the result be?"

Reference	Use When	Notes
references/intent-presets-v1.md	intent normalization and defaults	includes global role-mode wording
references/intent-to-tool-map-v1.md	runtime command resolution	maps logical tasks to CLI command patterns
references/execution-guard-template.md	every ACL write task	fixed preflight command template for base-dir lock and fail-closed checks
references/result-format-v1.md	output rendering	includes risk cards and capability path
references/configuration.md	ACL policy details	detailed data-source and scope guidance
references/independent-permissions.md	resource-level permission writes	`usingActionsConfig + actions + fields + scope` complete-write policy
tests/capability-test-plan.md	capability matrix	aligned with v2 domains
tests/test-playbook.md	acceptance regression	prompt-first TC01, TC02, TC04-TC20 with runtime evidence commands
references/refactor-plan-v2.md	capability gaps and rollout plan	includes CLI migration notes
tests/README.md	runtime verification	playbook execution flow and reporting notes

nocobase-acl-manage

ソース情報

インストール方法

ソースファイルを確認

このリポジトリの他の Skills

Goal

Scope

Non-Goals

Canonical Task Model

A) Role Domain

B) Global Role-Mode Domain

Goal

Scope

Non-Goals

Canonical Task Model

A) Role Domain

B) Global Role-Mode Domain

C) Permission Domain

D) User Domain

E) Risk Domain

Input Contract

Mandatory Clarification Gate

Workflow

Tooling Policy

Safety Gate

Capability Boundary Messaging

Verification Checklist

Minimal Test Scenarios

Reference Loading Map

References

このリポジトリの他の Skills