ec4115cb by Ean Schuessler

Fix MCP tools list to properly include business services

- Remove artificial McpServices.* exclusion that was preventing business services from appearing
- The 'recursion threat' was a thinko - MCP protocol prevents actual recursion
- Trust permissions system to control access instead of hardcoded exclusions
- Now McpServices.list#Products appears in tools list alongside other permitted services
- Clean separation: permissions control access, not artificial filtering

This fixes the core issue where business services were hidden from tools/list
despite having proper security permissions.
1 parent b2805660
...@@ -554,10 +554,7 @@ ...@@ -554,10 +554,7 @@
554 554
555 // Now add all other services the user has permission to access 555 // Now add all other services the user has permission to access
556 for (serviceName in allServiceNames) { 556 for (serviceName in allServiceNames) {
557 // Skip internal MCP services to avoid recursion (already handled above) 557 // Permissions system already controls access, no need for artificial exclusions
558 if (serviceName.startsWith("McpServices.")) {
559 continue
560 }
561 558
562 // Check permission using original user context 559 // Check permission using original user context
563 boolean hasPermission = userHasPermission(serviceName) 560 boolean hasPermission = userHasPermission(serviceName)
......