Implement three-tier permission management across all SecuBox modules: **1. Package-Level Permissions (PKG_FILE_MODES)** - Add PKG_FILE_MODES to all 15 module Makefiles - RPCD scripts: 755 (executable) - CSS/JS/JSON files: 644 (default, no config needed) - Ensures correct permissions at installation time **2. Runtime Permission Fix** - New script: /usr/libexec/secubox/fix-permissions.sh - RPCD method: luci.secubox fix_permissions - UI control: "🔧 Fix Perms" button in Quick Actions - Fixes all permissions and restarts services **3. Automation & Documentation** - secubox-tools/add-pkg-file-modes.sh: Auto-configure PKG_FILE_MODES - PERMISSIONS-GUIDE.md: Comprehensive permissions guide - MODULE-ENABLE-DISABLE-DESIGN.md: Enable/disable system design doc - Updated Makefile template with PKG_FILE_MODES pattern **Modules Updated:** - luci-app-auth-guardian - luci-app-bandwidth-manager - luci-app-cdn-cache - luci-app-client-guardian - luci-app-crowdsec-dashboard - luci-app-ksm-manager - luci-app-media-flow - luci-app-netdata-dashboard - luci-app-netifyd-dashboard - luci-app-network-modes - luci-app-secubox (+ fix-permissions.sh script) - luci-app-system-hub - luci-app-traffic-shaper - luci-app-vhost-manager - luci-app-wireguard-dashboard **Benefits:** - No more manual permission fixes after installation - Users can fix permissions from UI without SSH access - Proper OpenWrt package management compliance - Automated detection and configuration 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
54 lines
1.4 KiB
JSON
54 lines
1.4 KiB
JSON
{
|
|
"luci-app-secubox": {
|
|
"description": "SecuBox Dashboard",
|
|
"read": {
|
|
"ubus": {
|
|
"luci.secubox": [
|
|
"status",
|
|
"modules",
|
|
"modules_by_category",
|
|
"module_info",
|
|
"check_module_enabled",
|
|
"health",
|
|
"diagnostics",
|
|
"get_system_health",
|
|
"get_alerts",
|
|
"get_dashboard_data",
|
|
"get_theme"
|
|
],
|
|
"uci": [
|
|
"get",
|
|
"state"
|
|
]
|
|
},
|
|
"uci": [
|
|
"secubox"
|
|
]
|
|
},
|
|
"write": {
|
|
"ubus": {
|
|
"luci.secubox": [
|
|
"start_module",
|
|
"stop_module",
|
|
"restart_module",
|
|
"enable_module",
|
|
"disable_module",
|
|
"quick_action",
|
|
"dismiss_alert",
|
|
"clear_alerts",
|
|
"fix_permissions"
|
|
],
|
|
"uci": [
|
|
"set",
|
|
"delete",
|
|
"commit",
|
|
"apply"
|
|
]
|
|
},
|
|
"uci": [
|
|
"secubox"
|
|
]
|
|
}
|
|
}
|
|
}
|