feat: user roles - admins and users limited to the machines given to them, user editor with machines, password sign-in and its lock; direct address without Cloudflare as the agents' fallback and in the installer; version 0.1.2

internal/server/ship.go

@@ -151,6 +151,10 @@ func (s *Server) handleFSShip(w http.ResponseWriter, r *http.Request) {
 			writeJSON(w, proto.TaskResult{Error: "не выбрана машина"})
 			return
 		}
+		if !s.db.CanUseAgent(s.currentAdmin(r), q.To) {
+			writeJSON(w, proto.TaskResult{Error: "нет доступа к той машине"})
+			return
+		}
 		if !s.fsAgent(w, q.To, true) {
 			return
 		}