dify/api/controllers
QuantumGhost 32a1a61d65 security(api): enforce privilege validation for dataset-to-pipeline transformation
The transformation from classic dataset to knowledge pipeline represents an irreversible
write operation that permanently alters the dataset structure. To prevent unauthorized
modifications, this change implements strict privilege validation in `RagPipelineTransformApi`.

Only users with editor privileges or dataset operator roles are authorized to execute
this transformation, ensuring proper access control for this critical operation.
2025-09-12 17:07:26 +08:00
..
common feat: API docs for service api (#24425) 2025-08-25 09:26:54 +08:00
console security(api): enforce privilege validation for dataset-to-pipeline transformation 2025-09-12 17:07:26 +08:00
files chore(api): migrate import for db 2025-08-31 16:46:25 +08:00
inner_api fix: tenant_id was not specific when retrieval end-user in plugin backwards invocation wraps (#25377) 2025-09-09 09:49:35 +08:00
mcp remove bare list, dict, Sequence, None, Any (#25058) 2025-09-06 03:32:23 +08:00
service_api Merge branch 'main' into fix/value-content-rerender-error 2025-09-09 16:40:08 +08:00
web Merge branch 'feat/queue-based-graph-engine' into feat/rag-2 2025-09-08 14:30:43 +08:00
__init__.py chore(api/controllers): Apply Ruff Formatter. (#7645) 2024-08-26 15:29:10 +08:00