dify/api/controllers/console/datasets/rag_pipeline
QuantumGhost 32a1a61d65 security(api): enforce privilege validation for dataset-to-pipeline transformation
The transformation from classic dataset to knowledge pipeline represents an irreversible
write operation that permanently alters the dataset structure. To prevent unauthorized
modifications, this change implements strict privilege validation in `RagPipelineTransformApi`.

Only users with editor privileges or dataset operator roles are authorized to execute
this transformation, ensuring proper access control for this critical operation.
2025-09-12 17:07:26 +08:00
..
datasource_auth.py merge new graph engine 2025-08-27 17:46:46 +08:00
datasource_content_preview.py fix 2025-08-25 16:14:22 +08:00
rag_pipeline.py fix 2025-08-25 16:14:22 +08:00
rag_pipeline_datasets.py fix(rag-pipeline-dsl): dsl import session error 2025-09-04 11:03:45 +08:00
rag_pipeline_draft_variable.py fix(api): fix variable truncation related field not returned. 2025-09-03 12:29:38 +08:00
rag_pipeline_import.py fix 2025-08-25 16:14:22 +08:00
rag_pipeline_workflow.py security(api): enforce privilege validation for dataset-to-pipeline transformation 2025-09-12 17:07:26 +08:00