Skip to content

Commit 5e67c0b

Browse files
shaohuzhang1shaohuzhang1
authored
fix: resource permission group list (#3330)
1 parent 1f5587e commit 5e67c0b

File tree

1 file changed

+34
-33
lines changed

1 file changed

+34
-33
lines changed

‎apps/common/constants/permission_constants.py‎

Lines changed: 34 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -394,22 +394,22 @@ class PermissionConstants(Enum):
394394
)
395395
KNOWLEDGE_CREATE = Permission(
396396
group=Group.KNOWLEDGE, operate=Operate.CREATE, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
397-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
397+
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
398398
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
399399
)
400400
KNOWLEDGE_EDIT = Permission(
401401
group=Group.KNOWLEDGE, operate=Operate.EDIT, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
402-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
402+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
403403
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
404404
)
405405
KNOWLEDGE_DELETE = Permission(
406406
group=Group.KNOWLEDGE, operate=Operate.DELETE, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
407-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
407+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
408408
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
409409
)
410410
KNOWLEDGE_SYNC = Permission(
411411
group=Group.KNOWLEDGE, operate=Operate.SYNC, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
412-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
412+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
413413
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
414414
)
415415
KNOWLEDGE_EXPORT = Permission(
@@ -419,12 +419,12 @@ class PermissionConstants(Enum):
419419
)
420420
KNOWLEDGE_VECTOR = Permission(
421421
group=Group.KNOWLEDGE, operate=Operate.VECTOR, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
422-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
422+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
423423
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
424424
)
425425
KNOWLEDGE_GENERATE = Permission(
426426
group=Group.KNOWLEDGE, operate=Operate.GENERATE, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
427-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
427+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
428428
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
429429
)
430430
KNOWLEDGE_DOCUMENT_READ = Permission(
@@ -436,52 +436,52 @@ class PermissionConstants(Enum):
436436
KNOWLEDGE_DOCUMENT_CREATE = Permission(
437437
group=Group.KNOWLEDGE_DOCUMENT, operate=Operate.CREATE,
438438
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
439-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
439+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
440440
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
441441
)
442442
KNOWLEDGE_DOCUMENT_EDIT = Permission(
443443
group=Group.KNOWLEDGE_DOCUMENT, operate=Operate.EDIT, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
444-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
444+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
445445
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
446446
)
447447
KNOWLEDGE_DOCUMENT_DELETE = Permission(
448448
group=Group.KNOWLEDGE_DOCUMENT, operate=Operate.DELETE, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
449-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
449+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
450450
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
451451
)
452452
KNOWLEDGE_DOCUMENT_SYNC = Permission(
453453
group=Group.KNOWLEDGE_DOCUMENT, operate=Operate.SYNC, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
454-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
454+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
455455
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
456456
)
457457
KNOWLEDGE_DOCUMENT_EXPORT = Permission(
458458
group=Group.KNOWLEDGE_DOCUMENT, operate=Operate.EXPORT,
459459
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
460-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
460+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
461461
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
462462
)
463463
KNOWLEDGE_DOCUMENT_DOWNLOAD_SOURCE_FILE = Permission(
464464
group=Group.KNOWLEDGE_DOCUMENT, operate=Operate.EXPORT,
465465
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
466-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
466+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
467467
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
468468
)
469469
KNOWLEDGE_DOCUMENT_GENERATE = Permission(
470470
group=Group.KNOWLEDGE_DOCUMENT, operate=Operate.GENERATE,
471471
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
472-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
472+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
473473
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
474474
)
475475
KNOWLEDGE_DOCUMENT_VECTOR = Permission(
476476
group=Group.KNOWLEDGE_DOCUMENT, operate=Operate.VECTOR,
477477
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
478-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
478+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
479479
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
480480
)
481481
KNOWLEDGE_DOCUMENT_MIGRATE = Permission(
482482
group=Group.KNOWLEDGE_DOCUMENT, operate=Operate.MIGRATE,
483483
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
484-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
484+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
485485
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
486486
)
487487

@@ -494,23 +494,23 @@ class PermissionConstants(Enum):
494494
KNOWLEDGE_PROBLEM_CREATE = Permission(
495495
group=Group.KNOWLEDGE_PROBLEM, operate=Operate.CREATE,
496496
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
497-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
497+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
498498
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
499499
)
500500
KNOWLEDGE_PROBLEM_EDIT = Permission(
501501
group=Group.KNOWLEDGE_PROBLEM, operate=Operate.EDIT, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
502-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
502+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
503503
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
504504
)
505505
KNOWLEDGE_PROBLEM_DELETE = Permission(
506506
group=Group.KNOWLEDGE_PROBLEM, operate=Operate.DELETE, role_list=[RoleConstants.ADMIN, RoleConstants.USER],
507-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
507+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
508508
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
509509
)
510510
KNOWLEDGE_PROBLEM_RELATE = Permission(
511511
group=Group.KNOWLEDGE_PROBLEM, operate=Operate.RELATE,
512512
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
513-
resource_permission_group_list=[ResourcePermissionGroup.VIEW, ResourcePermissionGroup.MANAGE],
513+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
514514
parent_group=[WorkspaceGroup.KNOWLEDGE, UserGroup.KNOWLEDGE]
515515
)
516516
WORKSPACE_USER_RESOURCE_PERMISSION_READ = Permission(
@@ -618,86 +618,87 @@ class PermissionConstants(Enum):
618618
)
619619
APPLICATION_EXPORT = Permission(group=Group.APPLICATION, operate=Operate.EXPORT,
620620
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
621+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
621622
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
622623
)
623624
APPLICATION_DELETE = Permission(group=Group.APPLICATION, operate=Operate.DELETE,
624625
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
625626
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
626-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
627+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
627628
)
628629
APPLICATION_EDIT = Permission(group=Group.APPLICATION, operate=Operate.EDIT,
629630
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
630631
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
631-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
632+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
632633
)
633634
APPLICATION_OVERVIEW_READ = Permission(group=Group.OVERVIEW, operate=Operate.READ,
634635
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
635636
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
636-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
637+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
637638
)
638639
APPLICATION_OVERVIEW_EMBEDDED = Permission(group=Group.OVERVIEW, operate=Operate.EDIT,
639640
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
640641
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
641-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
642+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
642643
label=_('Embed third party')
643644
)
644645
APPLICATION_OVERVIEW_ACCESS = Permission(group=Group.OVERVIEW, operate=Operate.CREATE,
645646
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
646647
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
647-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
648+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
648649
label=_('Access restrictions')
649650
)
650651
APPLICATION_OVERVIEW_DISPLAY = Permission(group=Group.OVERVIEW, operate=Operate.DELETE,
651652
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
652653
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
653-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
654+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
654655
label=_('Display settings')
655656
)
656657
APPLICATION_OVERVIEW_API_KEY = Permission(group=Group.OVERVIEW, operate=Operate.DEBUG,
657658
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
658659
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
659-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
660+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
660661
label=_('API Key')
661662
)
662663
APPLICATION_OVERVIEW_PUBLIC = Permission(group=Group.OVERVIEW, operate=Operate.ADD_MEMBER,
663664
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
664665
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
665-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
666+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
666667
label=_('Public settings')
667668
)
668669
APPLICATION_CHAT_LOG = Permission(group=Group.APPLICATION_CHAT_LOG, operate=Operate.READ,
669670
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
670671
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
671-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
672+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
672673
label=_('Dialogue log'))
673674

674675
APPLICATION_CHAT_LOG_ANNOTATION = Permission(group=Group.APPLICATION_CHAT_LOG, operate=Operate.ANNOTATION,
675676
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
676677
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
677-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
678+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
678679
label=_('Dialogue log'))
679680

680681
APPLICATION_CHAT_LOG_EXPORT = Permission(group=Group.APPLICATION_CHAT_LOG, operate=Operate.EXPORT,
681682
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
682683
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
683-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
684+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
684685
label=_('Dialogue log'))
685686

686687
APPLICATION_CHAT_LOG_CLEAR_POLICY = Permission(group=Group.APPLICATION_CHAT_LOG, operate=Operate.CLEAR_POLICY,
687688
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
688689
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
689-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
690+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
690691
label=_('Dialogue log'))
691692

692693
APPLICATION_ACCESS_READ = Permission(group=Group.APPLICATION_ACCESS, operate=Operate.READ,
693694
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
694695
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
695-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
696+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
696697
)
697698
APPLICATION_ACCESS_EDIT = Permission(group=Group.APPLICATION_ACCESS, operate=Operate.EDIT,
698699
role_list=[RoleConstants.ADMIN, RoleConstants.USER],
699700
parent_group=[WorkspaceGroup.APPLICATION, UserGroup.APPLICATION],
700-
resource_permission_group_list=[ResourcePermissionGroup.VIEW],
701+
resource_permission_group_list=[ResourcePermissionGroup.MANAGE],
701702
)
702703
ABOUT_READ = Permission(group=Group.OTHER, operate=Operate.READ,
703704
role_list=[RoleConstants.ADMIN],

0 commit comments

Comments
 (0)