SuperAPI AI Directory

role-info

Security & auditing

View repository

Updated 10-15 17:18

About this skill

/role-info — 1C role analysis

Parses Rights.xml roles and produces a compact summary: objects are grouped by type, only allowed rights are shown. Compression: thousands of lines of XML → 50–150 lines of text.

Usage

/role-info <RightsPath>

RightsPath — path to the Rights.xml role file (usually Roles/ИмяРоли/Ext/Rights.xml).

Running the script

powershell.exe -File .claude/skills/role-info/scripts/role-info.ps1 -RightsPath <path> -OutFile <output.txt>

Parameters

Parameter Required Description
-RightsPath yes Path to Rights.xml
-ShowDenied no Show denied rights (hidden by default)
-Limit no Max output lines (default 150). 0 = no limit
-Offset no Skip N lines — for pagination (default 0)
-OutFile no Write the result to a file (UTF-8 BOM). Without this — output to the console

Important: Always use -OutFile and read the result via the Read tool. Direct output to the console via bash corrupts Cyrillic.

For a large role when output is truncated:

... -Offset 150            # пагинация: пропустить первые 150 строк

Output format

=== Role: БазовыеПраваБП --- "Базовые права: Бухгалтерия предприятия" ===

Properties: setForNewObjects=false, setForAttributesByDefault=true, independentRightsOfChildObjects=false

Allowed rights:

  Catalog (8):
    Контрагенты: Read, View, InputByString
    Банки: Read, View, InputByString
    ...

  Document (12):
    РеализацияТоваровУслуг: Read, View, Posting, InteractivePosting
    ...

  InformationRegister (6):
    ЦеныНоменклатуры: Read [RLS], Update
    ...

Denied: 18 rights (use -ShowDenied to list)

RLS: 4 restrictions
Templates: ДляРегистра, ПоЗначениям

---
Total: 138 allowed, 18 denied

[TRUNCATED] Shown 150 of 220 lines. Use -Offset 150 to continue.

Use -Offset N и -Limit N for page-by-page viewing.

Notation

  • [RLS] — right with record-level restriction (restrictionByCondition)
  • -View, -Edit — denied rights (in the Denied section, when -ShowDenied)
  • Nested objects are shown with the suffix: Контрагенты.StandardAttribute.PredefinedDataName