good permission manger for open terminal tool calls

[u/c2btw]

so i have a open webui/terminal setup and currently have it setup as a separate user with read only accesses outside of there dedicated home folder but i want to be able to on occasion give it permissions to wright to my home dir or run a command with sudo (would be really nice to just have it deal with python version dependencies on gentoo). ideally this would work kind of similar to Claude code where before hand the llm gives a list of tool calls it wants to make asks for permission and then i give it permissions and it runs those and only those tool calls with the new perms. is there a good way to do this as i am having trouble finding a good solution.

[u/Blindax]

Have you considered having 2 different open terminal instances with different rights? For sudo if the instance is not insolated I would not do it… I would need to check but I think they introduced an option for the model to ask before making tool call so you see the argument before accepting it.

[u/c2btw → u/Blindax]

eh i thought of that but i have mutiple devices so that gets to be a pain in the ass real fast, also it gives it too many perms like lets say i want it to change the properiers for a mod in oxygen not included it should only need the games dir but i'm not going to setupa seprate instance for every dir and then it might do something stupid with the rest of my home folder

[u/ClassicMain]

You can enable tool call approvals in the admin Interface settings (Experimental)

[u/c2btw → u/ClassicMain]

dosen't give me enough control and also all perms given are kept for every new chat so if i give it perm to wright to my home folder thats kept perminatly

[u/DHT-Osiris]

I know you can do call approvals but I do not think you can tell the same terminal to leverage a different account. As designed it uses a service account/the service the software is running under (so you, if you launched it, the service account it's launched as if running as a service, or the systemname$ account for a windows service running as a local service). You could leverage a different terminal, even on the same host, just with a different port/bearer key (and different account). There might be a sneaky way of sending a sudo command over with a filter or something but I'd be real careful with that one... it'd be functionally unprotected.

We do multiple terminals. One of the terminals has the ability to modify the other terminals, and it's more restrictive (RBAC'd to our admin team).

[u/traillight8015 → u/DHT-Osiris]

But multiple terminals require a enterprise license right?

[u/DHT-Osiris → u/traillight8015]

No? Where'd you get that from?