akadmin/chatwoot
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat: hide agent bot access_token when using read only token

Browse Source
This commit is contained in:
Shivam Mishra
2026-05-27 17:21:53 +05:30
parent 2f607f67c4
commit bd780b4cc6
2 changed files with 15 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/views/api/v1/models/_agent_bot.json.jbuilder
+2 -2
View File
@@ -6,6 +6,6 @@ json.outgoing_url resource.outgoing_url unless resource.system_bot?
json.bot_type resource.bot_type
json.bot_config resource.bot_config
json.account_id resource.account_id
json.access_token resource.access_token if resource.access_token.present?
json.secret resource.secret if !resource.system_bot? && Current.account_user&.administrator?
json.access_token resource.access_token if resource.access_token.present? && @access_token&.scope != 'read_only'
json.secret resource.secret if !resource.system_bot? && Current.account_user&.administrator? && @access_token&.scope != 'read_only'
json.system_bot resource.system_bot?