dify/api/controllers/console
QuantumGhost 32a1a61d65 security(api): enforce privilege validation for dataset-to-pipeline transformation
The transformation from classic dataset to knowledge pipeline represents an irreversible
write operation that permanently alters the dataset structure. To prevent unauthorized
modifications, this change implements strict privilege validation in `RagPipelineTransformApi`.

Only users with editor privileges or dataset operator roles are authorized to execute
this transformation, ensuring proper access control for this critical operation.
2025-09-12 17:07:26 +08:00
..
app Merge branch 'main' into fix/value-content-rerender-error 2025-09-09 16:40:08 +08:00
auth Revert "feat: email register refactor" (#25367) 2025-09-08 19:20:09 +08:00
billing more assert (#24996) 2025-09-08 09:59:43 +08:00
datasets security(api): enforce privilege validation for dataset-to-pipeline transformation 2025-09-12 17:07:26 +08:00
explore Merge remote-tracking branch 'origin/main' into feat/queue-based-graph-engine 2025-09-08 13:56:45 +08:00
tag Fix flask response: 200 -> {}, 200 (#25404) 2025-09-09 15:06:18 +08:00
workspace Merge branch 'main' into fix/value-content-rerender-error 2025-09-09 16:40:08 +08:00
__init__.py Revert "feat: email register refactor" (#25367) 2025-09-08 19:20:09 +08:00
admin.py add more typing (#24949) 2025-09-08 10:40:00 +08:00
apikey.py [Chore/Refactor] Improve type annotations in models module (#25281) 2025-09-08 09:42:27 +08:00
error.py Restructure the File errors in controller (#23801) 2025-08-13 17:06:07 +08:00
extension.py try flask_restful -> flask_restx (#24310) 2025-08-24 13:45:47 +08:00
feature.py try flask_restful -> flask_restx (#24310) 2025-08-24 13:45:47 +08:00
files.py chore(api): migrate import for db 2025-08-31 16:46:25 +08:00
init_validate.py try flask_restful -> flask_restx (#24310) 2025-08-24 13:45:47 +08:00
ping.py try flask_restful -> flask_restx (#24310) 2025-08-24 13:45:47 +08:00
remote_files.py chore(api): migrate import for db 2025-08-31 16:46:25 +08:00
setup.py try flask_restful -> flask_restx (#24310) 2025-08-24 13:45:47 +08:00
spec.py merge new graph engine 2025-08-27 17:46:46 +08:00
version.py Refactor: use logger = logging.getLogger(__name__) in logging (#24515) 2025-08-26 18:10:31 +08:00
wraps.py Revert "feat: email register refactor" (#25367) 2025-09-08 19:20:09 +08:00