mtfyun/dify
1
0 Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-11-13 14:51:39 +08:00
Code Issues Packages Projects Releases Wiki Activity
15,206 Commits 1,092 Branches 180 Tags
deploy/enterprise
Commit Graph
1836 Commits
Author SHA1 Message Date
yunlu.wen 2f61bf62ba fix(rbac): gate member role assignment on member manage 
Assigning roles to a member is reached from Settings > Members > Assign roles,
which the console already shows only to holders of workspace.member.manage.
Gate the PUT handler on the same permission so the offered action and the
enforced permission agree for custom roles that hold one key but not the other.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
(cherry picked from commit eec128d9c4)
 2026-11-11 16:23:39 +08:00
yunlu.wen 26baa6e646 fix(rbac): keep member role reads ungated 
GET .../members/<id>/rbac-roles feeds the member details dialog, which every
workspace member can open from the Members tab, and the member list endpoint
already returns each member's roles without a permission check. Gating the read
on WORKSPACE_ROLE_MANAGE would 403 the dialog for editors and normal members.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
(cherry picked from commit a742ef60eb)
 2026-11-11 16:19:07 +08:00
yunlu.wen 5ba2200c09 fix(rbac): enforce workspace role manage on member role routes 
RBACMemberRolesApi only declared plain account admission, unlike its
sibling routes in the same package (roles, policies), so WORKSPACE_ROLE_MANAGE
was enforced only by the enterprise RBAC inner API. Declare the check at the
controller boundary so the Console API rejects unauthorized callers before the
remote call, consistent with the rest of the RBAC surface.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
(cherry picked from commit bd8a319430)
 2026-11-11 16:03:29 +08:00
fatelei 74a1b1a411 chore: update pat range 2026-11-10 17:44:42 +08:00
fatelei ec8801b111 chore: remove rbac guard 2026-11-10 10:32:19 +08:00
fatelei 2b7cfa16fb chore: make pat logic inside 2026-11-09 17:13:22 +08:00
twwu 03d057f13a fix: improve personal access token management 2026-11-09 16:31:38 +08:00
fatelei 7990d442a1 chore: resolve comment 2026-11-09 16:31:38 +08:00
fatelei af0602f933 fix: fix ci failed 2026-11-09 16:31:38 +08:00
fatelei faecce194e fix: fix ci failed 2026-11-09 16:31:38 +08:00
fatelei 5337669aff feat: support personal access token 2026-11-09 16:31:36 +08:00
非法操作 b6d2d2170d refactor(api): inject app trigger publication and quota status lifecycle (#45188) 2026-11-09 06:29:12 +00:00
非法操作 dd21c981f2 refactor(api): inject trigger subscription renewal and event execution (#44653) 2026-11-09 02:42:52 +00:00
非法操作 a83ce881a1 refactor(api): inject plugin dynamic option queries (#44576) 2026-11-06 08:08:45 +00:00
非法操作 138ad48d30 refactor(api): inject plugin trigger endpoint dispatch (#44547) 2026-11-06 07:05:04 +00:00
周龙杰 da24f6d133 test(api): verify workflow publish transactions with SQLite (#45142) 2026-11-06 04:02:44 +00:00
非法操作 803f5d3d9c refactor(api): isolate trigger subscription management (#44541) 2026-11-05 09:54:35 +00:00
非法操作 45279b704d feat: restrict SaaS workflow collaboration to paid plans (#45549) 2026-11-05 08:19:37 +00:00
非法操作 107bbf85ca refactor(api): inject trigger subscription builder lifecycle (#44532) 2026-11-05 08:18:01 +00:00
非法操作 db3ffcc92b refactor(api): isolate trigger provider and subscription queries (#44514) 2026-11-05 07:20:07 +00:00
Tianyu Cai ce7ccc3754 fix(api): use the dataset doc_form when document requests omit it (#45581) 2026-11-05 06:55:00 +00:00
非法操作 11517691d2 refactor(api): isolate trigger OAuth authorization flow (#44505) 2026-11-05 06:21:44 +00:00
Evan 5d0c0b6657 refactor(api): inject sessions into RAG pipeline console controllers (#45605) 2026-11-05 04:17:24 +00:00
非法操作 b501b64f82 refactor(api): isolate trigger OAuth client configuration (#44469) 2026-11-04 12:02:15 +00:00
Evan 0fe1b06d1e fix: reject malformed pagination params with 400 instead of silent fallback (#36855) 2026-11-04 07:52:27 +00:00
非法操作andautofix-ci[bot] 52ae152e00 fix(api): reject invalid model provider icon paths (#45445) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-03 10:01:37 +00:00
Alter-xyzautofix-ci[bot]yyh
 		28dabd92ac feat(agent): add opt-in show thinking toggle for Agent v2 chat (#45427) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
 2026-11-03 09:49:33 +00:00
非法操作 cf38e6ad67 feat(api): add workflow collaboration metrics (#45446) 2026-11-03 09:40:53 +00:00
Eddy ZHANG 074e9e0b92 refactor(api): annotate KnowledgeFS Service API return types (#45295) 2026-11-03 06:05:40 +00:00
-LAN-andautofix-ci[bot] 0257f20b48 fix(openapi): exclude directories from skill import file counts (#45393) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-03 05:48:00 +00:00
Guishi Wang b5722ed557 fix(api): enforce dataset service API token scope (#44840) 2026-11-02 21:30:01 +00:00
FFXNautofix-ci[bot]Stephen Zhou
 		96b1b20c76 feat(api): validate models before knowledge base upgrades (#45312) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Stephen Zhou <hi@hyoban.cc>
 2026-11-02 11:13:21 +00:00
Xiyuan Chen 61d2c7402f fix(openapi): mark import.skill as destructive (#45314) 2026-11-02 09:44:17 +00:00
-LAN- 43d8c3715a refactor(tracing): one trace pipeline behind a minimal provider interface (#44673) 2026-11-02 12:16:49 +08:00
Asuka Minatoautofix-ci[bot]Codex
 		64a99c5556 chore: bump restx. now deco has type (#37391) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com>
 2026-11-02 03:24:33 +00:00
QuantumGhost 9dd087b885 feat(hitl): expose bound IM providers in contact options (#45233) 2026-11-01 07:48:22 +00:00
yyh 4c521a3c0a feat(api): type billing error reasons per proto service (#45203) 2026-10-31 14:07:12 +00:00
Peter PanandWH-2099 5907db83b0 fix(oauth): serialize and persist provider credential refreshes (#32195) 
Co-authored-by: WH-2099 <wh2099@pm.me>
 2026-10-31 12:04:00 +00:00
yyh 3ae9147417 feat(api): map billing error reasons to typed console errors (#45170) 2026-10-31 06:27:30 +00:00
非法操作 e3ef66b8b9 refactor(api): detach console statistics admission (#44411) 2026-10-30 16:40:23 +00:00
yyhandClaude Opus 5.5 749754fcd9 feat(api): return education verification as a status-discriminated result (#45165) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-30 15:01:46 +00:00
yyhandhjlarry 4612a807fe refactor(api): call billing education, compliance, account and notification APIs through the generated client (#45136) 
Co-authored-by: hjlarry <hjlarry@163.com>
 2026-10-30 12:19:34 +00:00
Asuka Minatoautofix-ci[bot]Codex
 		4293584598 ci: bump type checker (#44015) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com>
 2026-10-30 11:22:51 +00:00
yyhandhjlarry d945bea129 refactor(api): read billing subscription and usage through the generated client (#45131) 
Co-authored-by: hjlarry <hjlarry@163.com>
 2026-10-30 09:40:06 +00:00
Xiyuan Chen b92228f6c2 feat(openapi): workspace skill list, export, import and publish ops (#44941) 2026-10-30 08:24:55 +00:00
zyssyz123 efe37c59ae fix(agent): omit prompt history from LLM gateway streams (#45137) 2026-10-30 07:52:45 +00:00
Winorenautofix-ci[bot]Crazywoola
 		2c3cbd5045 fix(api): reject conflicting multipart file shapes (#44903) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Crazywoola <100913391+crazywoola@users.noreply.github.com>
 2026-10-30 04:48:45 +00:00
Winoren b1d2e2983b fix(web-api): reject internal approval tokens on public HITL endpoints (#44644) 2026-10-30 04:37:17 +00:00
QuantumGhostzxhlyhJzoNgautofix-ci[bot]
 		8cbb6c0130 feat: HITL IM integration (#44864) 
Co-authored-by: zxhlyh <jasonapring2015@outlook.com>
Co-authored-by: JzoNg <jzongcode@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-10-30 02:43:31 +00:00
非法操作 ad6ed864a1 refactor(api): share console conversation queries and deletion (#44043) 2026-10-30 02:35:00 +00:00