This skill provides a standardized framework for securing n8n's REST API using its native RBAC system. It guides developers in applying @ProjectScope and @GlobalScope decorators to REST controllers, ensuring that every authenticated route is properly gated against IDOR and permission bypass vulnerabilities. Beyond just decorators, it provides a comprehensive workflow for defining new permissions across the backend and frontend, including guidance on regression testing and defense-in-depth strategies to ensure data integrity at both the routing and service levels.
주요 기능
01End-to-end guidance for adding new permission resources to n8n
02Implementation patterns for public and unauthenticated routes
03Standardized application of @ProjectScope and @GlobalScope decorators
04Regression test patterns for route-metadata validation
05192,120 GitHub stars
06Automated checklist for frontend RBAC UI integration
사용 사례
01Adding custom administrative permissions that span both backend logic and frontend UI
02Auditing existing API endpoints to identify and fix permission bypass vulnerabilities
03Developing new REST controllers for n8n features requiring project-level access