From effe12cbeee18d316dda122e380524b84e6b742f Mon Sep 17 00:00:00 2001
From: hjlarry <hjlarry@163.com>
Date: Sun, 12 Apr 2026 18:43:43 +0800
Subject: [PATCH] fix: require edit permission for draft workflow feature
 updates

---
 api/controllers/console/app/workflow.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/api/controllers/console/app/workflow.py b/api/controllers/console/app/workflow.py
index 2bbf22ed83..f3c024a6b8 100644
--- a/api/controllers/console/app/workflow.py
+++ b/api/controllers/console/app/workflow.py
@@ -957,6 +957,7 @@ class WorkflowFeaturesApi(Resource):
     @login_required
     @account_initialization_required
     @get_app_model(mode=[AppMode.ADVANCED_CHAT, AppMode.WORKFLOW])
+    @edit_permission_required
     def post(self, app_model: App):
         current_user, _ = current_account_with_tenant()