f9f6bc01fd
CI / test (push) Canceled after 0s
## Summary epic r04 - begin refactor ## Change Type - [x] Cowork feature - [ ] Bug fix - [ ] Core AI contribution - [ ] Test / hardening - [ ] Performance - [ ] Documentation ## Related Work Cowork Task: Core Repo: http://34.143.229.138/gitea-admin/fsg-ai-core-assets Core AI Issue: Core Task: Related PR: ## Scope What is intentionally included? What is intentionally NOT included? ## Validation - [ ] Unit tests - [ ] Integration tests - [ ] Manual verification - [ ] Regression check Commands / evidence: ## Security Impact Permission / credential / network / customer data impact: ## Compatibility - [ ] No breaking change - [ ] Breaking change documented ## Reviewer Notes Anything Cowork reviewers should pay attention to. --------- Co-authored-by: Anh Tran Nguyen Minh <anhtnm1@fpt.com> Co-authored-by: Huong Le Thi Thien <huongltt35@fpt.com> Co-authored-by: Nam Pham Dinh Thanh <nampdt@fpt.com> Co-authored-by: Vu Dam Tuan <vudt15@fpt.com> Co-authored-by: Hiep Ha Van <hiephv3@fpt.com> Co-authored-by: Lam Hoang Van <lamhv7@fpt.com> Reviewed-on: #7 Co-authored-by: Duy Le Huu <duylh19@fpt.com>
65 lines
3.1 KiB
Python
65 lines
3.1 KiB
Python
"""Permissions card — "what is the agent allowed to touch?", displayed
|
|
nested inside the Sandbox Details card's expandable fold (see
|
|
``sandbox_tab.SandboxDetailsCard``), exactly as in the pre-refactor
|
|
``ui/monitoring_tab.py`` (``self._sbx_detail.layout().addWidget(self.ov_permissions_group)``).
|
|
Editing still opens the same Settings dialog as the Sandbox card's own
|
|
"Edit" button — this card only DISPLAYS ``ctx.config.agent_security``, it
|
|
does not host its own settings-editing UI.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
from typing import Callable
|
|
|
|
from PySide6.QtCore import Qt
|
|
from PySide6.QtWidgets import QGroupBox, QPushButton, QVBoxLayout
|
|
|
|
from ....i18n import tr
|
|
from ..shared.badges import apply_badge
|
|
from ..shared.layout_helpers import kv_row
|
|
from ..shared.open_settings import open_settings_and_notify
|
|
|
|
|
|
class PermissionsCard(QGroupBox):
|
|
"""Thẻ "Quyền": agent đang được phép làm gì với tệp, mạng và lệnh shell."""
|
|
def __init__(self, ctx, on_settings_changed: Callable[[], None]):
|
|
"""Thẻ thiết lập quyền: agent được đụng tới gì mà không phải hỏi."""
|
|
super().__init__()
|
|
self._ctx = ctx
|
|
self._on_settings_changed = on_settings_changed
|
|
self.setObjectName("monSection")
|
|
perm_lay = QVBoxLayout(self)
|
|
|
|
self.fs_lbl, self.fs_val = kv_row(perm_lay)
|
|
self.network_lbl, self.network_val = kv_row(perm_lay)
|
|
self.process_lbl, self.process_val = kv_row(perm_lay)
|
|
self.env_lbl, self.env_val = kv_row(perm_lay)
|
|
|
|
self.edit_btn = QPushButton()
|
|
self.edit_btn.setFlat(True)
|
|
self.edit_btn.clicked.connect(self._open_settings)
|
|
perm_lay.addWidget(self.edit_btn, 0, Qt.AlignLeft)
|
|
|
|
def _open_settings(self) -> None:
|
|
"""Mở hộp thoại Cài đặt tới nhóm an toàn, đóng xong thì làm mới thẻ."""
|
|
open_settings_and_notify(self._ctx, self, self._on_settings_changed)
|
|
|
|
def retranslate(self) -> None:
|
|
"""Áp lại chữ theo ngôn ngữ đang chọn."""
|
|
self.setTitle(tr("monitoring.overview_permissions_title").upper())
|
|
self.fs_lbl.setText(tr("monitoring.overview_perm_fs"))
|
|
self.fs_val.setText(tr("monitoring.overview_perm_fs_value"))
|
|
self.network_lbl.setText(tr("monitoring.overview_perm_network"))
|
|
self.process_lbl.setText(tr("monitoring.overview_perm_process"))
|
|
self.process_val.setText(tr("monitoring.overview_perm_process_value"))
|
|
self.env_lbl.setText(tr("monitoring.overview_perm_env"))
|
|
self.env_val.setText(tr("monitoring.overview_perm_env_value"))
|
|
self.edit_btn.setText(tr("monitoring.overview_edit"))
|
|
|
|
def refresh(self) -> None:
|
|
"""Đọc lại cấu hình an toàn và cập nhật các dòng quyền."""
|
|
net_blocked = bool(self._ctx.config.agent_security.get("block_network"))
|
|
self.network_val.setText(
|
|
tr("monitoring.overview_perm_network_blocked") if net_blocked
|
|
else tr("monitoring.overview_perm_network_allowed"))
|
|
apply_badge(self.network_val, "badgeWarn" if net_blocked else "badgeSuccess")
|