feat: UserResourcePermission

Author: shaohuzhang1

apps/common/constants/permission_constants.py

@@ -26,6 +26,8 @@ class Group(Enum):
 
     TOOL = "TOOL"
 
+    WORKSPACE_USER_RESOURCE_PERMISSION = "WORKSPACE_USER_RESOURCE_PERMISSION"
+
 
 class Operate(Enum):
     """
@@ -218,6 +220,11 @@ class PermissionConstants(Enum):
     KNOWLEDGE_CREATE = Permission(group=Group.KNOWLEDGE, operate=Operate.CREATE, role_list=[RoleConstants.ADMIN,
                                                                                             RoleConstants.USER])
 
+    WORKSPACE_USER_RESOURCE_PERMISSION_READ = Permission(group=Group.WORKSPACE_USER_RESOURCE_PERMISSION,
+                                                         operate=Operate.READ,
+                                                         role_list=[RoleConstants.ADMIN,
+                                                                    RoleConstants.WORKSPACE_MANAGE])
+
     def get_workspace_application_permission(self):
         return lambda r, kwargs: Permission(group=self.value.group, operate=self.value.operate,
                                             resource_path=

apps/maxkb/urls.py

@@ -26,6 +26,7 @@
     path("api/", include("models_provider.urls")),
     path("api/", include("folders.urls")),
     path("api/", include("knowledge.urls")),
+    path("api/", include("system_manage.urls")),
 ]
 urlpatterns += [
     path('schema/', SpectacularAPIView.as_view(), name='schema'),  # schema的配置文件的路由，下面两个ui也是根据这个配置文件来生成的

apps/system_manage/api/__init__.py

@@ -0,0 +1,8 @@
+# coding=utf-8
+"""
+    @project: MaxKB
+    @Author：虎虎
+    @file： __init__.py
+    @date：2025/4/28 17:05
+    @desc:
+"""

apps/system_manage/api/user_resource_permission.py

@@ -0,0 +1,37 @@
+# coding=utf-8
+"""
+    @project: MaxKB
+    @Author：虎虎
+    @file： workspace_user_resource_permission.py
+    @date：2025/4/28 18:13
+    @desc:
+"""
+from drf_spectacular.types import OpenApiTypes
+from drf_spectacular.utils import OpenApiParameter
+
+from common.mixins.api_mixin import APIMixin
+from common.result import ResultSerializer
+from system_manage.serializers.user_resource_permission import UserResourcePermissionResponse
+
+
+class APIUserResourcePermissionResponse(ResultSerializer):
+    def get_data(self):
+        return UserResourcePermissionResponse(many=True)
+
+
+class UserResourcePermissionAPI(APIMixin):
+    @staticmethod
+    def get_parameters():
+        return [
+            OpenApiParameter(
+                name="workspace_id",
+                description="工作空间id",
+                type=OpenApiTypes.STR,
+                location='path',
+                required=True,
+            )
+        ]
+
+    @staticmethod
+    def get_response():
+        return APIUserResourcePermissionResponse

apps/system_manage/serializers/__init__.py

@@ -0,0 +1,8 @@
+# coding=utf-8
+"""
+    @project: MaxKB
+    @Author：虎虎
+    @file： __init__.py
+    @date：2025/4/28 17:05
+    @desc:
+"""

apps/system_manage/serializers/user_resource_permission.py

@@ -0,0 +1,35 @@
+# coding=utf-8
+"""
+    @project: MaxKB
+    @Author：虎虎
+    @file： workspace_user_resource_permission.py
+    @date：2025/4/28 17:17
+    @desc:
+"""
+from django.db.models import QuerySet
+from rest_framework import serializers
+from django.utils.translation import gettext_lazy as _
+
+from system_manage.models import WorkspaceUserResourcePermission
+
+
+class UserResourcePermissionResponse(serializers.ModelSerializer):
+    class Meta:
+        model = WorkspaceUserResourcePermission
+        fields = [
+            'id', 'workspace_id', 'user_id', 'auth_target_type', 'target',
+            'auth_type', 'permission_list', 'create_time', 'update_time'
+        ]
+
+
+class UserResourcePermissionSerializer(serializers.Serializer):
+    workspace_id = serializers.CharField(required=True, label=_('workspace id'))
+
+    def list(self, with_valid=True):
+        if with_valid:
+            self.is_valid(raise_exception=True)
+        workspace_id = self.data.get("workspace_id")
+        workspace_user_resource_permission_list = QuerySet(WorkspaceUserResourcePermission).filter(
+            workspace_id=workspace_id)
+        return [UserResourcePermissionResponse(data=user_resource_permission).data for user_resource_permission in
+                workspace_user_resource_permission_list]

apps/system_manage/urls.py

@@ -0,0 +1,8 @@
+from django.urls import path
+
+from . import views
+
+app_name = "system_manage"
+urlpatterns = [
+    path('workspace/<str:workspace_id>/user_resource_permission', views.WorkSpaceUserResourcePermissionView.as_view())
+]

apps/system_manage/views/__init__.py

@@ -6,3 +6,4 @@
     @date：2025/4/16 19:07
     @desc:
 """
+from .user_resource_permission import *

apps/system_manage/views/user_resource_permission.py

@@ -0,0 +1,38 @@
+# coding=utf-8
+"""
+    @project: MaxKB
+    @Author：虎虎
+    @file： workspace_user_resource_permission.py
+    @date：2025/4/28 16:38
+    @desc:
+"""
+from urllib.request import Request
+
+from django.utils.translation import gettext_lazy as _
+from drf_spectacular.utils import extend_schema
+from rest_framework.views import APIView
+
+from common import result
+from common.auth import TokenAuth
+from common.auth.authentication import has_permissions
+from common.constants.permission_constants import PermissionConstants
+from system_manage.api.user_resource_permission import UserResourcePermissionAPI
+from system_manage.serializers.user_resource_permission import UserResourcePermissionSerializer
+
+
+class WorkSpaceUserResourcePermissionView(APIView):
+    authentication_classes = [TokenAuth]
+
+    @extend_schema(
+        methods=['GET'],
+        description=_('Obtain resource authorization list'),
+        operation_id=_('Obtain resource authorization list'),
+        parameters=UserResourcePermissionAPI.get_parameters(),
+        responses=UserResourcePermissionAPI.get_response(),
+        tags=[_('Resources authorization')]
+    )
+    @has_permissions(PermissionConstants.WORKSPACE_USER_RESOURCE_PERMISSION_READ.get_workspace_permission())
+    def get(self, request: Request, workspace_id: str):
+        return result.success(UserResourcePermissionSerializer(
+            data={'workspace_id': workspace_id}
+        ).list())