From d7c3ae50dc08ede39440881a9a6541d0272fbe23 Mon Sep 17 00:00:00 2001 From: Xiyuan Chen <52963600+GareArc@users.noreply.github.com> Date: Wed, 4 Feb 2026 17:57:23 -0800 Subject: [PATCH] Update api/services/tools/builtin_tools_manage_service.py Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- api/services/tools/builtin_tools_manage_service.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/api/services/tools/builtin_tools_manage_service.py b/api/services/tools/builtin_tools_manage_service.py index 6328e0fc6a..f895e88e6b 100644 --- a/api/services/tools/builtin_tools_manage_service.py +++ b/api/services/tools/builtin_tools_manage_service.py @@ -424,7 +424,11 @@ class BuiltinToolManageService: # Enterprise: verify admin permission for tenant-wide operation from models.account import TenantAccountRole - if account and not TenantAccountRole.is_privileged_role(account.current_role): + if account is None: + # In enterprise mode, an account context is required to perform permission checks + raise ValueError("Account is required to set default credentials in enterprise mode") + + if not TenantAccountRole.is_privileged_role(account.current_role): raise ValueError("Only workspace admins/owners can set default credentials in enterprise mode") # Enterprise: clear ALL defaults for this provider in the tenant # (regardless of user_id, since enterprise credentials may have different user_id)