add socket edit permission validate

2026-01-20 13:56:28 +08:00 · 2026-01-20 13:56:28 +08:00 · bdac6f91dd
parent 9be496f953
commit bdac6f91dd
1 changed files with 2 additions and 0 deletions
--- a/api/controllers/console/socketio/workflow.py
+++ b/api/controllers/console/socketio/workflow.py
@ -49,6 +49,8 @@ def socket_connect(sid, environ, auth):
            user = AccountService.load_logged_in_account(account_id=user_id)
            if not user:
                return False
+            if not user.has_edit_permission:
+                return False

            collaboration_service.save_session(sid, user)
            return True