dify/api/controllers/console/datasets
QuantumGhost 32a1a61d65 security(api): enforce privilege validation for dataset-to-pipeline transformation
The transformation from classic dataset to knowledge pipeline represents an irreversible
write operation that permanently alters the dataset structure. To prevent unauthorized
modifications, this change implements strict privilege validation in `RagPipelineTransformApi`.

Only users with editor privileges or dataset operator roles are authorized to execute
this transformation, ensuring proper access control for this critical operation.
2025-09-12 17:07:26 +08:00
..
rag_pipeline security(api): enforce privilege validation for dataset-to-pipeline transformation 2025-09-12 17:07:26 +08:00
data_source.py Merge branch 'main' into fix/value-content-rerender-error 2025-09-09 16:40:08 +08:00
datasets.py Merge branch 'feat/queue-based-graph-engine' into feat/rag-2 2025-09-03 15:01:06 +08:00
datasets_document.py Merge branch 'feat/queue-based-graph-engine' into feat/rag-2 2025-09-08 14:30:43 +08:00
datasets_segments.py try flask_restful -> flask_restx (#24310) 2025-08-24 13:45:47 +08:00
error.py Merge branch 'main' into feat/rag-2 2025-08-14 15:03:48 +08:00
external.py try flask_restful -> flask_restx (#24310) 2025-08-24 13:45:47 +08:00
hit_testing.py try flask_restful -> flask_restx (#24310) 2025-08-24 13:45:47 +08:00
hit_testing_base.py Refactor: use logger = logging.getLogger(__name__) in logging (#24515) 2025-08-26 18:10:31 +08:00
metadata.py Fix flask response: 200 -> {}, 200 (#25404) 2025-09-09 15:06:18 +08:00
website.py try flask_restful -> flask_restx (#24310) 2025-08-24 13:45:47 +08:00
wraps.py merge new graph engine 2025-08-27 17:46:46 +08:00