mirror of
https://github.com/langgenius/dify.git
synced 2026-09-05 00:31:19 +08:00
30ed0907f3
# Conflicts: # api/controllers/console/app/site.py # api/controllers/console/datasets/datasets.py # api/core/plugin/backwards_invocation/model.py # api/core/rag/rerank/rerank_model.py # api/tests/test_containers_integration_tests/controllers/console/auth/test_oauth_server.py # api/tests/unit_tests/core/plugin/test_backwards_invocation_model.py # api/tests/unit_tests/tasks/test_batch_clean_document_task.py # packages/contracts/generated/api/service/orpc.gen.ts # web/app/components/datasets/rename-modal/index.tsx # web/app/components/header/account-setting/model-provider-page/model-selector/popup-layout.tsx # web/features/tag-management/components/tag-search-content.tsx
95 lines
3.3 KiB
Python
95 lines
3.3 KiB
Python
from enum import StrEnum
|
|
|
|
|
|
class RBACResourceScope(StrEnum):
|
|
"""Resource scopes accepted by the ``rbac_permission_required`` decorator.
|
|
|
|
``WORKSPACE`` denotes a workspace-level check that carries no concrete
|
|
resource id; ``APP`` and ``DATASET`` are resource-scoped checks.
|
|
"""
|
|
|
|
APP = "app"
|
|
DATASET = "dataset"
|
|
KNOWLEDGE_FS = "knowledge_space"
|
|
WORKSPACE = "workspace"
|
|
|
|
|
|
class RBACResourceWhitelistScope(StrEnum):
|
|
"""Whitelist scopes accepted by RBAC app and dataset access config APIs."""
|
|
|
|
ALL = "all"
|
|
SPECIFIC = "specific"
|
|
ONLY_ME = "only_me"
|
|
|
|
|
|
class RBACPermission(StrEnum):
|
|
"""Permission points (RBAC scenes) checked by ``rbac_permission_required``.
|
|
|
|
Each member's value is the scene name forwarded to the RBAC
|
|
``check-access`` endpoint.
|
|
"""
|
|
|
|
APP_VIEW_LAYOUT = "app_view_layout"
|
|
APP_TEST_AND_RUN = "app_test_and_run"
|
|
APP_PREVIEW = "app_preview"
|
|
APP_CREATE_AND_MANAGEMENT = "app_create_and_management"
|
|
APP_RELEASE_AND_VERSION = "app_release_and_version"
|
|
APP_IMPORT_EXPORT_DSL = "app_import_export_dsl"
|
|
APP_EDIT = "app_edit"
|
|
APP_MONITOR = "app_monitor"
|
|
APP_TRACING_CONFIG = "app_tracing_config"
|
|
APP_LOG_AND_ANNOTATION = "app_log_and_annotation"
|
|
APP_DELETE = "app_delete"
|
|
APP_ACCESS_CONFIG = "app_access_config"
|
|
|
|
DATASET_PREVIEW = "dataset_preview"
|
|
DATASET_READONLY = "dataset_readonly"
|
|
DATASET_EDIT = "dataset_edit"
|
|
DATASET_CREATE_AND_MANAGEMENT = "dataset_create_and_management"
|
|
DATASET_PIPELINE_TEST = "dataset_pipeline_test"
|
|
DATASET_DOCUMENT_DOWNLOAD = "dataset_document_download"
|
|
DATASET_RETRIEVAL_RECALL = "dataset_retrieval_recall"
|
|
DATASET_USE = "dataset_use"
|
|
DATASET_DELETE_FILE = "dataset_delete_file"
|
|
DATASET_PIPELINE_RELEASE = "dataset_pipeline_release"
|
|
DATASET_DELETE = "dataset_delete"
|
|
DATASET_ACCESS_CONFIG = "dataset_access_config"
|
|
DATASET_API_KEY_MANAGE = "dataset_api_key_manage"
|
|
DATASET_EXTERNAL_CONNECT = "dataset_external_connect"
|
|
DATASET_IMPORT_EXPORT_DSL = "dataset_import_export_dsl"
|
|
|
|
KNOWLEDGE_FS_READ = "knowledge_space_read"
|
|
KNOWLEDGE_FS_CREATE = "knowledge_space_create"
|
|
KNOWLEDGE_FS_EDIT = "knowledge_space_edit"
|
|
KNOWLEDGE_FS_DELETE = "knowledge_space_delete"
|
|
KNOWLEDGE_FS_ACCESS_CONFIG = "knowledge_space_access_config"
|
|
KNOWLEDGE_FS_DOCUMENT_WRITE = "knowledge_space_document_write"
|
|
KNOWLEDGE_FS_QUERY = "knowledge_space_query"
|
|
|
|
WORKSPACE_MEMBER_MANAGE = "workspace_member_manage"
|
|
WORKSPACE_ROLE_MANAGE = "workspace_role_manage"
|
|
API_EXTENSION_MANAGE = "api_extension_manage"
|
|
CUSTOMIZATION_MANAGE = "customization_manage"
|
|
AGENT_MANAGE = "agent_manage"
|
|
SKILL_VIEW = "skill_view"
|
|
SKILL_EDIT = "skill_edit"
|
|
SKILL_PUBLISH = "skill_publish"
|
|
SKILL_DELETE = "skill_delete"
|
|
|
|
SNIPPETS_CREATE_AND_MODIFY = "snippets_create_and_modify"
|
|
SNIPPETS_MANAGE = "snippets_management"
|
|
|
|
PLUGIN_INSTALL = "plugin_install"
|
|
PLUGIN_PREFERENCES = "plugin_preferences"
|
|
PLUGIN_MODEL_CONFIG = "plugin_model_config"
|
|
PLUGIN_MANAGE = "plugin_manage"
|
|
PLUGIN_DELETE = "plugin_delete"
|
|
PLUGIN_DEBUG = "plugin_debug"
|
|
|
|
CREDENTIAL_USE = "credential_use"
|
|
CREDENTIAL_CREATE = "credential_create"
|
|
CREDENTIAL_MANAGE = "credential_manage"
|
|
|
|
TOOL_MANAGE = "tool_manage"
|
|
MCP_MANAGE = "mcp_manage"
|