feat: add user role permissions to workspace operations

Author: liuruibin

apps/models_provider/views/model.py

@@ -65,7 +65,7 @@ class ModelSetting(APIView):
                    request=ModelCreateAPI.get_request(),
                    responses=ModelCreateAPI.get_response())
     @has_permissions(PermissionConstants.MODEL_CREATE.get_workspace_permission(),
-                     RoleConstants.WORKSPACE_MANAGE.get_workspace_role())
+                      RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role())
     @log(menu='model', operate='Create model',
          get_operation_object=lambda r, k: {'name': r.date.get('name')},
          get_details=get_edit_model_details,
@@ -95,7 +95,7 @@ def post(self, request: Request, workspace_id: str):
                    responses=ModelListResponse.get_response(),
                    tags=[_('Model')])  # type: ignore
     @has_permissions(PermissionConstants.MODEL_READ.get_workspace_permission(),
-                     RoleConstants.WORKSPACE_MANAGE.get_workspace_role())
+                      RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role())
     def get(self, request: Request, workspace_id: str):
         return result.success(
             ModelSerializer.Query(
@@ -114,7 +114,7 @@ class Operate(APIView):
                        responses=ModelEditApi.get_response(),
                        tags=[_('Model')])  # type: ignore
         @has_permissions(PermissionConstants.MODEL_EDIT.get_workspace_permission(),
-                         RoleConstants.WORKSPACE_MANAGE.get_workspace_role())
+                          RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role())
         @log(menu='model', operate='Update model',
              get_operation_object=lambda r, k: get_model_operation_object(k.get('model_id')),
              get_details=get_edit_model_details,
@@ -133,7 +133,7 @@ def put(self, request: Request, workspace_id, model_id: str):
                        responses=DefaultModelResponse.get_response(),
                        tags=[_('Model')])  # type: ignore
         @has_permissions(PermissionConstants.MODEL_DELETE.get_workspace_permission(),
-                         RoleConstants.WORKSPACE_MANAGE.get_workspace_role())
+                          RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role())
         @log(menu='model', operate='Delete model',
              get_operation_object=lambda r, k: get_model_operation_object(k.get('model_id')),
              )
@@ -150,7 +150,7 @@ def delete(self, request: Request, workspace_id: str, model_id: str):
                        responses=GetModelApi.get_response(),
                        tags=[_('Model')])  # type: ignore
         @has_permissions(PermissionConstants.MODEL_READ.get_workspace_permission(),
-                         RoleConstants.WORKSPACE_MANAGE.get_workspace_role())
+                          RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role())
         def get(self, request: Request, workspace_id: str, model_id: str):
             return result.success(
                 ModelSerializer.Operate(
@@ -168,7 +168,7 @@ class ModelParamsForm(APIView):
                        responses=ProvideApi.ModelParamsForm.get_response(),
                        tags=[_('Model')])  # type: ignore
         @has_permissions(PermissionConstants.MODEL_READ.get_workspace_permission(),
-                         RoleConstants.WORKSPACE_MANAGE.get_workspace_role())
+                          RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role())
         def get(self, request: Request, workspace_id: str, model_id: str):
             return result.success(
                 ModelSerializer.ModelParams(data={'id': model_id}).get_model_params())
@@ -182,7 +182,7 @@ def get(self, request: Request, workspace_id: str, model_id: str):
                        responses=ProvideApi.ModelParamsForm.get_response(),
                        tags=[_('Model')])  # type: ignore
         @has_permissions(PermissionConstants.MODEL_READ.get_workspace_permission(),
-                         RoleConstants.WORKSPACE_MANAGE.get_workspace_role())
+                          RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role())
         @log(menu='model', operate='Save model parameter form',
              get_operation_object=lambda r, k: get_model_operation_object(k.get('model_id')),
              )
@@ -204,7 +204,7 @@ class ModelMeta(APIView):
                        responses=GetModelApi.get_response(),
                        tags=[_('Model')])  # type: ignore
         @has_permissions(PermissionConstants.MODEL_READ.get_workspace_permission(),
-                         RoleConstants.WORKSPACE_MANAGE.get_workspace_role())
+                          RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role())
         def get(self, request: Request, workspace_id: str, model_id: str):
             return result.success(
                 ModelSerializer.Operate(data={'id': model_id, 'workspace_id': workspace_id}).one_meta(with_valid=True))
@@ -221,7 +221,7 @@ class PauseDownload(APIView):
                        responses=DefaultModelResponse.get_response(),
                        tags=[_('Model')])  # type: ignore
         @has_permissions(PermissionConstants.MODEL_CREATE.get_workspace_permission(),
-                         RoleConstants.WORKSPACE_MANAGE.get_workspace_role())
+                          RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role())
         def put(self, request: Request, workspace_id: str, model_id: str):
             return result.success(
                 ModelSerializer.Operate(data={'id': model_id, 'workspace_id': workspace_id}).pause_download())
@@ -239,7 +239,7 @@ class SharedModel(APIView):
         responses=ModelListResponse.get_response(),
         tags=[_('Shared Model')]
     )  # type: ignore
-    @has_permissions(PermissionConstants.MODEL_READ, RoleConstants.WORKSPACE_MANAGE.get_workspace_role())
+    @has_permissions(PermissionConstants.MODEL_READ,  RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role())
     def get(self, request: Request, workspace_id: str):
         return result.success(
             SharedModelSerializer(data={'workspace_id': workspace_id}).get_share_model_list())