fix(auth): enforce password and agent role boundaries

This commit is contained in:
wchino
2026-07-21 23:41:18 +08:00
parent fb15c64d9b
commit 457d2cc9e5
7 changed files with 135 additions and 19 deletions

View File

@@ -23,7 +23,9 @@ final class InvalidPlatformAgentRoleCleanup
->whereNotExists(static function ($query): void {
$query->selectRaw('1')
->from('admin_user_agents as cleanup_uag')
->whereColumn('cleanup_uag.admin_user_id', 'admin_user_site_roles.admin_user_id');
->join('agent_nodes as cleanup_node', 'cleanup_node.id', '=', 'cleanup_uag.agent_node_id')
->whereColumn('cleanup_uag.admin_user_id', 'admin_user_site_roles.admin_user_id')
->whereColumn('cleanup_node.admin_site_id', 'admin_user_site_roles.site_id');
})
->delete();
}