mtfyun/dify
1
0 Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-11-12 22:31:24 +08:00
Code Issues Packages Projects Releases Wiki Activity
15,206 Commits 1,085 Branches 180 Tags
deploy/enterprise
Commit Graph
1425 Commits
Author SHA1 Message Date
yunlu.wen 2f61bf62ba fix(rbac): gate member role assignment on member manage 
Assigning roles to a member is reached from Settings > Members > Assign roles,
which the console already shows only to holders of workspace.member.manage.
Gate the PUT handler on the same permission so the offered action and the
enforced permission agree for custom roles that hold one key but not the other.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
(cherry picked from commit eec128d9c4)
 2026-11-11 16:23:39 +08:00
yunlu.wen 26baa6e646 fix(rbac): keep member role reads ungated 
GET .../members/<id>/rbac-roles feeds the member details dialog, which every
workspace member can open from the Members tab, and the member list endpoint
already returns each member's roles without a permission check. Gating the read
on WORKSPACE_ROLE_MANAGE would 403 the dialog for editors and normal members.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
(cherry picked from commit a742ef60eb)
 2026-11-11 16:19:07 +08:00
yunlu.wen 5ba2200c09 fix(rbac): enforce workspace role manage on member role routes 
RBACMemberRolesApi only declared plain account admission, unlike its
sibling routes in the same package (roles, policies), so WORKSPACE_ROLE_MANAGE
was enforced only by the enterprise RBAC inner API. Declare the check at the
controller boundary so the Console API rejects unauthorized callers before the
remote call, consistent with the rest of the RBAC surface.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
(cherry picked from commit bd8a319430)
 2026-11-11 16:03:29 +08:00
非法操作 1d5299deb3 refactor(api): inject trigger subscription renewal and event execution (#44653) 2026-11-09 14:15:16 +08:00
非法操作 4350a19824 refactor(api): inject plugin dynamic option queries (#44576) 2026-11-09 14:14:40 +08:00
周龙杰 d2ff1b1801 test(api): verify workflow publish transactions with SQLite (#45142) 2026-11-09 14:14:37 +08:00
非法操作 25da472891 refactor(api): isolate trigger subscription management (#44541) 2026-11-09 14:14:36 +08:00
非法操作 ee08bff381 feat: restrict SaaS workflow collaboration to paid plans (#45549) 2026-11-09 14:14:35 +08:00
非法操作 4c9a888a22 refactor(api): inject trigger subscription builder lifecycle (#44532) 2026-11-09 14:14:35 +08:00
非法操作 ef64cb9331 refactor(api): isolate trigger provider and subscription queries (#44514) 2026-11-09 14:14:33 +08:00
非法操作 7138ad18db refactor(api): isolate trigger OAuth authorization flow (#44505) 2026-11-09 14:14:33 +08:00
Evan 9cf4907452 refactor(api): inject sessions into RAG pipeline console controllers (#45605) 2026-11-09 14:14:32 +08:00
非法操作 d4dda259f7 refactor(api): isolate trigger OAuth client configuration (#44469) 2026-11-09 14:14:28 +08:00
twwu 93a87ba725 fix: improve personal access token management 2026-11-05 15:08:16 +08:00
fatelei 672bd28ce8 chore: resolve comment 2026-11-05 09:52:31 +08:00
fatelei 738b4a0c41 feat: support personal access token 2026-11-04 15:04:48 +08:00
非法操作andautofix-ci[bot] 52ae152e00 fix(api): reject invalid model provider icon paths (#45445) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-03 10:01:37 +00:00
非法操作 cf38e6ad67 feat(api): add workflow collaboration metrics (#45446) 2026-11-03 09:40:53 +00:00
FFXNautofix-ci[bot]Stephen Zhou
 		96b1b20c76 feat(api): validate models before knowledge base upgrades (#45312) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Stephen Zhou <hi@hyoban.cc>
 2026-11-02 11:13:21 +00:00
-LAN- 43d8c3715a refactor(tracing): one trace pipeline behind a minimal provider interface (#44673) 2026-11-02 12:16:49 +08:00
Asuka Minatoautofix-ci[bot]Codex
 		64a99c5556 chore: bump restx. now deco has type (#37391) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com>
 2026-11-02 03:24:33 +00:00
QuantumGhost 9dd087b885 feat(hitl): expose bound IM providers in contact options (#45233) 2026-11-01 07:48:22 +00:00
yyh 4c521a3c0a feat(api): type billing error reasons per proto service (#45203) 2026-10-31 14:07:12 +00:00
Peter PanandWH-2099 5907db83b0 fix(oauth): serialize and persist provider credential refreshes (#32195) 
Co-authored-by: WH-2099 <wh2099@pm.me>
 2026-10-31 12:04:00 +00:00
yyh 3ae9147417 feat(api): map billing error reasons to typed console errors (#45170) 2026-10-31 06:27:30 +00:00
非法操作 e3ef66b8b9 refactor(api): detach console statistics admission (#44411) 2026-10-30 16:40:23 +00:00
yyhandClaude Opus 5.5 749754fcd9 feat(api): return education verification as a status-discriminated result (#45165) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-30 15:01:46 +00:00
yyhandhjlarry 4612a807fe refactor(api): call billing education, compliance, account and notification APIs through the generated client (#45136) 
Co-authored-by: hjlarry <hjlarry@163.com>
 2026-10-30 12:19:34 +00:00
Asuka Minatoautofix-ci[bot]Codex
 		4293584598 ci: bump type checker (#44015) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com>
 2026-10-30 11:22:51 +00:00
yyhandhjlarry d945bea129 refactor(api): read billing subscription and usage through the generated client (#45131) 
Co-authored-by: hjlarry <hjlarry@163.com>
 2026-10-30 09:40:06 +00:00
QuantumGhostzxhlyhJzoNgautofix-ci[bot]
 		8cbb6c0130 feat: HITL IM integration (#44864) 
Co-authored-by: zxhlyh <jasonapring2015@outlook.com>
Co-authored-by: JzoNg <jzongcode@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-10-30 02:43:31 +00:00
非法操作 ad6ed864a1 refactor(api): share console conversation queries and deletion (#44043) 2026-10-30 02:35:00 +00:00
非法操作 02ca1df07d refactor(api): remove legacy account update endpoints (#45015) 2026-10-29 12:40:31 +00:00
yyhandClaude f1739f12d7 fix: expose KnowledgeFS availability in workspace features (#45073) 
Co-authored-by: Claude <noreply@anthropic.com>
 2026-10-29 12:04:18 +00:00
FFXN 6af924cd9f fix: resolve Notion page listing and document import failures (#45053) 2026-10-29 08:04:29 +00:00
zyssyz123autofix-ci[bot]yyhyyh
 		9e978defde feat(agent): support batch config file uploads (SNP-997) (#44947) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
 2026-10-29 04:42:35 +00:00
Jyong 03fe4879a4 fix(knowledge-fs): preserve model settings failure details (#44971) 2026-10-29 01:05:06 +00:00
Stephen Zhouandautofix-ci[bot] e8b9a3c7fa fix(web): search all New RAG documents and restore scrolling (#44818) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-10-27 08:24:39 +00:00
非法操作 55501cf62b refactor(api): share conversation rename service and repository (#43991) 2026-10-27 06:59:24 +00:00
非法操作andautofix-ci[bot] a0b2e14960 refactor(api): isolate console annotation management (#43807) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-10-27 04:18:00 +00:00
非法操作 69b58b68aa refactor(api): unify message list and detail queries (#43754) 2026-10-27 02:04:44 +00:00
非法操作 51e643fff1 refactor(api): unify message feedback across app entrypoints (#43748) 2026-10-26 09:46:11 +00:00
非法操作 173d52d46a refactor(api): unify more-like-this generation across Web and Explore (#43715) 2026-10-26 09:09:42 +00:00
非法操作 a0c3901d39 refactor(api): unify message suggested questions across API surfaces (#43440) 2026-10-26 08:12:51 +00:00
WH-2099 76979a1e24 Merge commit from fork 
https://github.com/langgenius/dify/security/advisories/GHSA-384g-pjvf-m9c9
 2026-10-26 15:34:16 +08:00
Stephen Zhouandautofix-ci[bot] 226110d611 feat(web): set up @dify/openapi-content-mapper foundations (#44627) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-10-26 05:06:34 +00:00
WH-2099 64fe95667b Merge commit from fork 
https://github.com/langgenius/dify/security/advisories/GHSA-94wf-cjw5-5974
 2026-10-26 12:04:28 +08:00
Stephen ZhouJyonghjlarryClaude Opus 5.5autofix-ci[bot]zhaohao1004yyhFFXN
 		fd2db63184 feat: KnowledgeFS and New Knowledge (#44165) 
Co-authored-by: Jyong <76649700+JohnJyong@users.noreply.github.com>
Co-authored-by: hjlarry <hjlarry@163.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: zhaohao1004 <zhaohao1004@gmail.com>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
Co-authored-by: FFXN <lizy@dify.ai>
 2026-10-23 03:34:59 +00:00
非法操作 5fb3658c28 refactor(api): detach console app trigger management (#44457) 2026-10-22 04:49:31 +00:00
zyssyz123andyyh 0a620ddd95 feat(tracing): export Agent app and Workflow Agent execution trees (#44144) 
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
 2026-10-22 02:11:12 +00:00