mirror of
https://github.com/langgenius/dify.git
synced 2026-09-05 08:48:10 +08:00
79116d8c4b
Legacy knowledge bases (`datasets`) and KnowledgeFS spaces (`knowledge_fs_control_spaces`) live in different tables, so a dataset API key binding could only ever name a legacy dataset and the KnowledgeFS service API never consulted bindings at all: a key scoped to specific knowledge bases still reached every KnowledgeFS space in the workspace. - Bindings carry a `resource_type` (`dataset` | `knowledge_fs_space`) and a nullable `control_space_id` (migration 9a4e7d1c2b60, existing rows stay `dataset`), with a CHECK that exactly one id column matches the type. - `dataset_api_key_service` exposes the key scope by kind, validates and binds KnowledgeFS spaces (tenant-owned, not deleting/deleted), and cleans up keys scoped only to a space when its deletion is requested. The orphan-key cleanup is now NULL-safe so a space binding keeps a key alive. - Legacy dataset routes only honour `dataset` bindings; the KnowledgeFS authorization service only honours `knowledge_fs_space` bindings and raises a scope error that the service API maps to 403 (unknown keys stay 401). - Console key creation accepts `knowledge_space_ids`; list/create responses return them next to `dataset_ids`. - The web scope picker lists KnowledgeFS spaces alongside legacy datasets when KnowledgeFS is enabled and submits the ids by kind; the scope column counts both. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015zw5G5SX3HmVfnZof6YWAc |
||
|---|---|---|
| .. | ||
| agent | ||
| app | ||
| auth | ||
| billing | ||
| datasets | ||
| explore | ||
| snippets | ||
| tag | ||
| workspace | ||
| __init__.py | ||
| test_apikey.py | ||
| test_document_detail_api_data_source_info.py | ||
| test_extension.py | ||
| test_fastopenapi_init_validate.py | ||
| test_fastopenapi_setup.py | ||
| test_fastopenapi_system.py | ||
| test_feature.py | ||
| test_files_security.py | ||
| test_files.py | ||
| test_human_input_form.py | ||
| test_init_validate.py | ||
| test_notification.py | ||
| test_oauth_custom_client_permissions.py | ||
| test_onboarding.py | ||
| test_remote_files.py | ||
| test_spec.py | ||
| test_system.py | ||
| test_workflow_run_archive.py | ||
| test_workspace_account.py | ||
| test_workspace_credential_mutation_permissions.py | ||
| test_workspace_members.py | ||
| test_wraps.py | ||