mtfyun/dify
1
0 Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-11-13 14:51:39 +08:00
Code Issues Packages Projects Releases Wiki Activity
15,206 Commits 1,092 Branches 180 Tags
deploy/enterprise
Commit Graph
8727 Commits
Author SHA1 Message Date
yunlu.wen 2f61bf62ba fix(rbac): gate member role assignment on member manage 
Assigning roles to a member is reached from Settings > Members > Assign roles,
which the console already shows only to holders of workspace.member.manage.
Gate the PUT handler on the same permission so the offered action and the
enforced permission agree for custom roles that hold one key but not the other.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
(cherry picked from commit eec128d9c4)
 2026-11-11 16:23:39 +08:00
yunlu.wen 26baa6e646 fix(rbac): keep member role reads ungated 
GET .../members/<id>/rbac-roles feeds the member details dialog, which every
workspace member can open from the Members tab, and the member list endpoint
already returns each member's roles without a permission check. Gating the read
on WORKSPACE_ROLE_MANAGE would 403 the dialog for editors and normal members.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
(cherry picked from commit a742ef60eb)
 2026-11-11 16:19:07 +08:00
yunlu.wen 5ba2200c09 fix(rbac): enforce workspace role manage on member role routes 
RBACMemberRolesApi only declared plain account admission, unlike its
sibling routes in the same package (roles, policies), so WORKSPACE_ROLE_MANAGE
was enforced only by the enterprise RBAC inner API. Declare the check at the
controller boundary so the Console API rejects unauthorized callers before the
remote call, consistent with the rest of the RBAC surface.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
(cherry picked from commit bd8a319430)
 2026-11-11 16:03:29 +08:00
fatelei 74a1b1a411 chore: update pat range 2026-11-10 17:44:42 +08:00
fatelei ec8801b111 chore: remove rbac guard 2026-11-10 10:32:19 +08:00
fatelei 61743f4b98 feat: limit resource and workspace is none 2026-11-09 19:15:54 +08:00
fatelei 2b7cfa16fb chore: make pat logic inside 2026-11-09 17:13:22 +08:00
twwu 03d057f13a fix: improve personal access token management 2026-11-09 16:31:38 +08:00
fatelei 8075dab1ff fix: fix style check failed 2026-11-09 16:31:38 +08:00
fatelei 7990d442a1 chore: resolve comment 2026-11-09 16:31:38 +08:00
fatelei e3747e7ead fix: fix ci failed 2026-11-09 16:31:38 +08:00
fatelei af0602f933 fix: fix ci failed 2026-11-09 16:31:38 +08:00
fatelei faecce194e fix: fix ci failed 2026-11-09 16:31:38 +08:00
fatelei 684cf61ac5 fix: remove new getattr usage from PAT admission and tests 2026-11-09 16:31:37 +08:00
fatelei 5337669aff feat: support personal access token 2026-11-09 16:31:36 +08:00
非法操作 2626e944ec refactor(api): inject trigger subscription renewal scheduling (#45190) 2026-11-09 07:28:38 +00:00
非法操作 b6d2d2170d refactor(api): inject app trigger publication and quota status lifecycle (#45188) 2026-11-09 06:29:12 +00:00
非法操作 cc53107f82 refactor(api): inject workflow trigger subscription bindings (#45172) 2026-11-09 03:03:35 +00:00
非法操作 dd21c981f2 refactor(api): inject trigger subscription renewal and event execution (#44653) 2026-11-09 02:42:52 +00:00
wangxiaolei 262cbe8dab chore: remove unnessary rbac call (#45857) 2026-11-09 02:26:30 +00:00
JackSmith 65f8cd695f test(api): verify agent purge deletion order with real SQLite (#45859) 2026-11-09 02:05:14 +00:00
ChengFa d130654d5c fix(validation): reject email local parts with leading, trailing, or consecutive dots (#45786) 2026-11-08 20:19:14 +00:00
Xx.Zhao 337a0a8f7f fix(api): resolve agent node parameter templates without a JSON round-trip (#45419) 2026-11-08 19:26:03 +00:00
yetugeandyetuge 30aa6fd15b test(api): bring three service test modules under strict pyrefly (#45699) 
Co-authored-by: yetuge <yetuge@users.noreply.github.com>
 2026-11-08 17:54:41 +00:00
Felix ShiandFelix Shi fda5b19752 test(api): annotate quota, plugin factory and cleaner tests for strict pyrefly (#45766) 
Co-authored-by: Felix Shi <204130665+shi-felix@users.noreply.github.com>
 2026-11-08 17:49:40 +00:00
Felix ShiandAsuka Minato 76c780eeba test(api): annotate trigger, tool-entity and planner tests for strict pyrefly (#45767) 
Co-authored-by: Asuka Minato <i@asukaminato.eu.org>
 2026-11-08 17:48:29 +00:00
yetugeandyetuge 3e4e040ae0 test(api): bring the human input adapter tests under strict pyrefly (#45819) 
Co-authored-by: yetuge <yetuge@users.noreply.github.com>
 2026-11-08 17:22:26 +00:00
yetugeandyetuge 55a01879d7 test(api): annotate rag index processor tests for strict pyrefly (#45820) 
Co-authored-by: yetuge <yetuge@users.noreply.github.com>
 2026-11-08 17:22:16 +00:00
Felix ShiandFelix Shi c49e039b7b test(e2e): annotate two console controller tests for strict pyrefly (#45770) 
Co-authored-by: Felix Shi <204130665+shi-felix@users.noreply.github.com>
 2026-11-08 17:15:25 +00:00
Eddy ZHANG a6ffeb308f test(api): strictly type agent tool callback tests (#45835) 2026-11-08 17:14:02 +00:00
MindOfqc af0c3810b6 fix: send workflow agent uploads to vision models (#45745) 2026-11-08 16:55:51 +00:00
yetugeandyetuge 208a2489f0 test(api): bring the logging filter tests under strict pyrefly (#45823) 
Co-authored-by: yetuge <yetuge@users.noreply.github.com>
 2026-11-08 09:39:21 +00:00
TINGyu123644andautofix-ci[bot] ee98137e7d test(api): add unit tests for metadata filtering entities (#45262) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-08 07:58:06 +00:00
yetugeandyetuge c68f6d5d44 test(api): bring two command test modules under strict pyrefly (#45633) 
Co-authored-by: yetuge <yetuge@users.noreply.github.com>
 2026-11-08 07:57:52 +00:00
yetugeandyetuge b4374e0289 test(api): annotate callback and provider configuration tests for strict pyrefly (#45729) 
Co-authored-by: yetuge <yetuge@users.noreply.github.com>
 2026-11-08 07:56:59 +00:00
Felix Shi a53d96365a test(e2e): annotate factory and model tests for strict pyrefly (#45771) 2026-11-08 07:28:31 +00:00
Felix Shi 669d9acacc test(e2e): annotate two dataset service tests for strict pyrefly (#45772) 2026-11-08 07:27:17 +00:00
Felix ShiFelix ShiAsuka Minatoautofix-ci[bot]
 		82e4b51b1e refactor(api): enable strict typing for service-layer test files (#44888) 
Co-authored-by: Felix Shi <204130665+shi-felix@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-08 07:25:30 +00:00
yetugeandyetuge 9ea42b882a test(api): annotate services helper and enterprise tests for strict pyrefly (#45725) 
Co-authored-by: yetuge <yetuge@users.noreply.github.com>
 2026-11-08 07:24:03 +00:00
Paul Y HuiandClaude Opus 5.5 a8eeb467cc refactor(api): stop holding a database session across embedding model calls (#45788) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-08 06:23:28 +00:00
Alter-xyz b10ba3bfee fix(agent): pass declared app inputs to the agent run (#45425) 2026-11-08 05:46:55 +00:00
AlexMultiAgentandByron Wang db530adfa9 fix(rag): close downloaded temp file before reopening it in WordExtractor (#39894) 
Co-authored-by: Byron Wang <byron@dify.ai>
 2026-11-08 05:43:48 +00:00
Denis ErmakovJHC56Byron Wang
 		0180bd0378 refactor(api): replace pytz with zoneinfo (#43362) 
Co-authored-by: JHC56 <246447183+JHC56@users.noreply.github.com>
Co-authored-by: Byron Wang <byron@dify.ai>
 2026-11-08 05:38:19 +00:00
Felix Shi bb318051c8 test(e2e): annotate two workflow service tests for strict pyrefly (#45773) 2026-11-08 04:26:26 +00:00
yetugeandyetuge 6bffd5b932 test(api): annotate core tool tests for strict pyrefly (#45726) 
Co-authored-by: yetuge <yetuge@users.noreply.github.com>
 2026-11-08 04:24:35 +00:00
egg119egg119Asuka Minato
 		2f1fd4cb89 chore(models): remove redundant server_default from workflow run models (#45738) 
Co-authored-by: egg119 <egg119@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org>
 2026-11-07 11:36:45 +00:00
Eddy ZHANG 65b4e17d6e test(api): strictly type LLM utility contract tests (#45763) 2026-11-07 06:37:16 +00:00
Felix Shi 363b08096f test(api): annotate three app-config and queue tests for strict pyrefly (#45764) 2026-11-07 06:36:29 +00:00
Felix Shi e39ffaa397 test(api): annotate entity, annotation and timeslice tests for strict pyrefly (#45765) 2026-11-07 06:36:07 +00:00
Eddy ZHANG bc85740809 test(api): strictly type input moderation tests (#45759) 2026-11-07 05:30:33 +00:00