ad hoc permissions (TODO improve)

packages/api/src/controllers/config.js

@@ -32,6 +32,7 @@ module.exports = {
     return {
       runAsPortal: !!connections.portalConnections,
       singleDatabase: connections.singleDatabase,
+      hideAppEditor: !!process.env.HIDE_APP_EDITOR,
       permissions,
       ...currentVersion,
     };

packages/api/src/controllers/runners.js

@@ -149,6 +149,10 @@ module.exports = {
 
   start_meta: true,
   async start({ script }) {
+    if (process.env.DISABLE_SHELL) {
+      return { errorMessage: 'Shell is disabled' };
+    }
+
     const runid = uuidv1();
     return this.startCore(runid, scriptTemplate(script, false));
   },