panyy
/
UnisKB
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: Remove debug permission

v3.2
zhangzhanwei 2025-09-19 16:52:18 +08:00 committed by zhanweizhang7
parent f77ad75025
commit 6a0145758c
7 changed files with 28 additions and 42 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apps/application/views/application_chat.py
View File

@ -125,8 +125,8 @@ class OpenView(APIView):
responses=None, responses=None,
tags=[_('Application')] # type: ignore tags=[_('Application')] # type: ignore
) )
@has_permissions(PermissionConstants.APPLICATION_DEBUG.get_workspace_application_permission(), @has_permissions(PermissionConstants.APPLICATION_EDIT.get_workspace_application_permission(),
PermissionConstants.APPLICATION_DEBUG.get_workspace_permission_workspace_manage_role(), PermissionConstants.APPLICATION_EDIT.get_workspace_permission_workspace_manage_role(),
ViewPermission([RoleConstants.USER.get_workspace_role()], ViewPermission([RoleConstants.USER.get_workspace_role()],
[PermissionConstants.APPLICATION.get_workspace_application_permission()], [PermissionConstants.APPLICATION.get_workspace_application_permission()],
CompareConstants.AND), CompareConstants.AND),

4
apps/application/views/application_chat_record.py
View File

@ -93,8 +93,8 @@ class ApplicationChatRecordOperateAPI(APIView):
) )
@has_permissions(PermissionConstants.APPLICATION_CHAT_LOG_READ.get_workspace_application_permission(), @has_permissions(PermissionConstants.APPLICATION_CHAT_LOG_READ.get_workspace_application_permission(),
PermissionConstants.APPLICATION_CHAT_LOG_READ.get_workspace_permission_workspace_manage_role(), PermissionConstants.APPLICATION_CHAT_LOG_READ.get_workspace_permission_workspace_manage_role(),
PermissionConstants.APPLICATION_DEBUG.get_workspace_application_permission(), PermissionConstants.APPLICATION_EDIT.get_workspace_application_permission(),
PermissionConstants.APPLICATION_DEBUG.get_workspace_permission_workspace_manage_role(), PermissionConstants.APPLICATION_EDIT.get_workspace_permission_workspace_manage_role(),
ViewPermission([RoleConstants.USER.get_workspace_role()], ViewPermission([RoleConstants.USER.get_workspace_role()],
[PermissionConstants.APPLICATION.get_workspace_application_permission()], [PermissionConstants.APPLICATION.get_workspace_application_permission()],
CompareConstants.AND), CompareConstants.AND),

42
apps/common/constants/permission_constants.py
View File

@ -510,12 +510,6 @@ class PermissionConstants(Enum):
parent_group=[WorkspaceGroup.TOOL, UserGroup.TOOL], parent_group=[WorkspaceGroup.TOOL, UserGroup.TOOL],
resource_permission_group_list=[ResourcePermissionConst.TOOL_MANGE] resource_permission_group_list=[ResourcePermissionConst.TOOL_MANGE]
) )
TOOL_DEBUG = Permission(
group=Group.TOOL, operate=Operate.DEBUG, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
parent_group=[WorkspaceGroup.TOOL, UserGroup.TOOL],
resource_permission_group_list=[ResourcePermissionConst.TOOL_MANGE]
)
TOOL_IMPORT = Permission( TOOL_IMPORT = Permission(
group=Group.TOOL, operate=Operate.IMPORT, role_list=[RoleConstants.ADMIN, RoleConstants.USER], group=Group.TOOL, operate=Operate.IMPORT, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
parent_group=[WorkspaceGroup.TOOL, UserGroup.TOOL], parent_group=[WorkspaceGroup.TOOL, UserGroup.TOOL],
@ -804,12 +798,17 @@ class PermissionConstants(Enum):
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION], parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
resource_permission_group_list=[ResourcePermissionConst.APPLICATION_VIEW], resource_permission_group_list=[ResourcePermissionConst.APPLICATION_VIEW],
) )
APPLICATION_DEBUG = Permission(group=Group.APPLICATION, operate=Operate.DEBUG, APPLICATION_CREATE = Permission(group=Group.APPLICATION, operate=Operate.CREATE,
role_list=[RoleConstants.ADMIN, RoleConstants.USER], role_list=[RoleConstants.ADMIN, RoleConstants.USER],
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION], parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
resource_permission_group_list=[ResourcePermissionConst.APPLICATION_MANGE], resource_permission_group_list=[ResourcePermissionConst.APPLICATION_MANGE],
) )
APPLICATION_CREATE = Permission(group=Group.APPLICATION, operate=Operate.CREATE, APPLICATION_EDIT = Permission(group=Group.APPLICATION, operate=Operate.EDIT,
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
resource_permission_group_list=[ResourcePermissionConst.APPLICATION_MANGE],
)
APPLICATION_DELETE = Permission(group=Group.APPLICATION, operate=Operate.DELETE,
role_list=[RoleConstants.ADMIN, RoleConstants.USER], role_list=[RoleConstants.ADMIN, RoleConstants.USER],
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION], parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
resource_permission_group_list=[ResourcePermissionConst.APPLICATION_MANGE], resource_permission_group_list=[ResourcePermissionConst.APPLICATION_MANGE],
@ -824,17 +823,6 @@ class PermissionConstants(Enum):
resource_permission_group_list=[ResourcePermissionConst.APPLICATION_MANGE], resource_permission_group_list=[ResourcePermissionConst.APPLICATION_MANGE],
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION], parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
) )
APPLICATION_DELETE = Permission(group=Group.APPLICATION, operate=Operate.DELETE,
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
resource_permission_group_list=[ResourcePermissionConst.APPLICATION_MANGE],
)
APPLICATION_EDIT = Permission(group=Group.APPLICATION, operate=Operate.EDIT,
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
resource_permission_group_list=[ResourcePermissionConst.APPLICATION_MANGE],
)
APPLICATION_RESOURCE_AUTHORIZATION = Permission(group=Group.APPLICATION, operate=Operate.AUTH, APPLICATION_RESOURCE_AUTHORIZATION = Permission(group=Group.APPLICATION, operate=Operate.AUTH,
role_list=[RoleConstants.ADMIN, RoleConstants.USER], role_list=[RoleConstants.ADMIN, RoleConstants.USER],
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION], parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
@ -1233,20 +1221,20 @@ class PermissionConstants(Enum):
group=Group.SYSTEM_RES_APPLICATION, operate=Operate.READ, role_list=[RoleConstants.ADMIN], group=Group.SYSTEM_RES_APPLICATION, operate=Operate.READ, role_list=[RoleConstants.ADMIN],
parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE" parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE"
) )
RESOURCE_APPLICATION_DEBUG = Permission( RESOURCE_APPLICATION_EDIT = Permission(
group=Group.SYSTEM_RES_APPLICATION, operate=Operate.DEBUG, role_list=[RoleConstants.ADMIN], group=Group.SYSTEM_RES_APPLICATION, operate=Operate.EDIT, role_list=[RoleConstants.ADMIN],
parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE"
)
RESOURCE_APPLICATION_EXPORT = Permission(
group=Group.SYSTEM_RES_APPLICATION, operate=Operate.EXPORT, role_list=[RoleConstants.ADMIN],
parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE" parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE"
) )
RESOURCE_APPLICATION_DELETE = Permission( RESOURCE_APPLICATION_DELETE = Permission(
group=Group.SYSTEM_RES_APPLICATION, operate=Operate.DELETE, role_list=[RoleConstants.ADMIN], group=Group.SYSTEM_RES_APPLICATION, operate=Operate.DELETE, role_list=[RoleConstants.ADMIN],
parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE" parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE"
) )
RESOURCE_APPLICATION_EDIT = Permission( RESOURCE_APPLICATION_DEBUG = Permission(
group=Group.SYSTEM_RES_APPLICATION, operate=Operate.EDIT, role_list=[RoleConstants.ADMIN], group=Group.SYSTEM_RES_APPLICATION, operate=Operate.DEBUG, role_list=[RoleConstants.ADMIN],
parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE"
)
RESOURCE_APPLICATION_EXPORT = Permission(
group=Group.SYSTEM_RES_APPLICATION, operate=Operate.EXPORT, role_list=[RoleConstants.ADMIN],
parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE" parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE"
) )
RESOURCE_APPLICATION_AUTH = Permission( RESOURCE_APPLICATION_AUTH = Permission(

4
apps/tools/views/tool.py
View File

@ -92,8 +92,8 @@ class ToolView(APIView):
tags=[_('Tool')] # type: ignore tags=[_('Tool')] # type: ignore
) )
@has_permissions( @has_permissions(
PermissionConstants.TOOL_DEBUG.get_workspace_permission(), PermissionConstants.TOOL_EDIT.get_workspace_permission(),
PermissionConstants.TOOL_DEBUG.get_workspace_permission_workspace_manage_role(), PermissionConstants.TOOL_EDIT.get_workspace_permission_workspace_manage_role(),
RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role() RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role()
) )
def post(self, request: Request, workspace_id: str): def post(self, request: Request, workspace_id: str):

4
ui/src/permission/application/workspace.ts
View File

@ -38,8 +38,8 @@ const workspace = {
[ [
new ComplexPermission([RoleConst.USER],[PermissionConst.APPLICATION.getApplicationWorkspaceResourcePermission(source_id)],[],'AND'), new ComplexPermission([RoleConst.USER],[PermissionConst.APPLICATION.getApplicationWorkspaceResourcePermission(source_id)],[],'AND'),
RoleConst.WORKSPACE_MANAGE.getWorkspaceRole, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
PermissionConst.APPLICATION_DEBUG.getWorkspacePermissionWorkspaceManageRole, PermissionConst.APPLICATION_EDIT.getWorkspacePermissionWorkspaceManageRole,
PermissionConst.APPLICATION_DEBUG.getApplicationWorkspaceResourcePermission(source_id) PermissionConst.APPLICATION_EDIT.getApplicationWorkspaceResourcePermission(source_id)
], ],
'OR' 'OR'
), ),

4
ui/src/permission/tool/workspace.ts
View File

@ -125,8 +125,8 @@ const workspace = {
[ [
RoleConst.USER.getWorkspaceRole, RoleConst.USER.getWorkspaceRole,
RoleConst.WORKSPACE_MANAGE.getWorkspaceRole, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
PermissionConst.TOOL_DEBUG.getWorkspacePermission, PermissionConst.TOOL_EDIT.getWorkspacePermission,
PermissionConst.TOOL_DEBUG.getWorkspacePermissionWorkspaceManageRole PermissionConst.TOOL_EDIT.getWorkspacePermissionWorkspaceManageRole
], ],
'OR' 'OR'
), ),

2
ui/src/utils/permission/data.ts
View File

@ -133,7 +133,6 @@ const PermissionConst = {
APPLICATION_CREATE: new Permission('APPLICATION:READ+CREATE'), APPLICATION_CREATE: new Permission('APPLICATION:READ+CREATE'),
APPLICATION_IMPORT: new Permission('APPLICATION:READ+IMPORT'), APPLICATION_IMPORT: new Permission('APPLICATION:READ+IMPORT'),
APPLICATION_SETTING: new Permission('APPLICATION:READ+SETTING'), APPLICATION_SETTING: new Permission('APPLICATION:READ+SETTING'),
APPLICATION_DEBUG: new Permission('APPLICATION:READ+DEBUG'),
APPLICATION_TO_CHAT: new Permission('APPLICATION:READ+TO_CHAT'), APPLICATION_TO_CHAT: new Permission('APPLICATION:READ+TO_CHAT'),
APPLICATION_OVERVIEW_READ: new Permission('APPLICATION_OVERVIEW:READ'), APPLICATION_OVERVIEW_READ: new Permission('APPLICATION_OVERVIEW:READ'),
@ -207,7 +206,6 @@ const PermissionConst = {
TOOL_EDIT: new Permission('TOOL:READ+EDIT'), TOOL_EDIT: new Permission('TOOL:READ+EDIT'),
TOOL_READ: new Permission('TOOL:READ'), TOOL_READ: new Permission('TOOL:READ'),
TOOL_DELETE: new Permission('TOOL:READ+DELETE'), TOOL_DELETE: new Permission('TOOL:READ+DELETE'),
TOOL_DEBUG: new Permission('TOOL:READ+DEBUG'),
TOOL_IMPORT: new Permission('TOOL:READ+IMPORT'), TOOL_IMPORT: new Permission('TOOL:READ+IMPORT'),
TOOL_EXPORT: new Permission('TOOL:READ+EXPORT'), TOOL_EXPORT: new Permission('TOOL:READ+EXPORT'),