From 438fd93d8e10e4c54ed9f2796103556c1143a2bd Mon Sep 17 00:00:00 2001 From: Deluan Date: Sat, 12 Apr 2025 21:30:13 -0400 Subject: [PATCH] Clarify Permission Manager responsibilities in HLD --- docs/hld-plugins.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/docs/hld-plugins.md b/docs/hld-plugins.md index 1928fb16e..7a0ed4cac 100644 --- a/docs/hld-plugins.md +++ b/docs/hld-plugins.md @@ -101,9 +101,11 @@ Implementations of metadata agents, starting with: Component that: -- Validates plugin permissions against configuration -- Enforces per-plugin restrictions on host functions -- Manages plugin-specific configurations +- Validates plugin manifests against administrator-defined security policies +- Controls which host functions each plugin can access +- Enforces URL-specific HTTP access restrictions +- Manages data access permissions (configuration, user preferences) +- Provides runtime security checks during plugin execution ### 2.3 Data Flow