recommend 权限限制
Open
Nobody has claimed this yet.
domain/auth
enhancement
- Dominant language
- Go
- Stars
- 17.3k
- Forks
- 1.4k
- Avg merge
- 2d 4h
- Merged PRs (30d)
- 105
Description
lark-cli auth login --recommend
该指令会默认授权几乎所有功能的读写权限，个人认为不太合理，会有很大的越权风险，当前 AI 并不可靠。数据安全比功能可用性更重要，对飞书产品我认为并不友好。建议可以开通所有的只读权限，写权限应当根据客户使用情况提示客户开通。
或者至少提供一个 readonly 的全局推荐配置，现在的读写权限全部开通太吓人了。
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the lark-cli auth login --recommend entry point and trace how its default permission scopes are assembled. Review any nearby authentication tests or configuration handling before deciding how the proposed read-only behavior fits the existing flow. Done means the recommendation no longer grants broad write access by default and its permission behavior is covered by verification.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- authorization, cli, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100