yunlu.wen 2f61bf62ba fix(rbac): gate member role assignment on member manage ...

Assigning roles to a member is reached from Settings > Members > Assign roles,
which the console already shows only to holders of workspace.member.manage.
Gate the PUT handler on the same permission so the offered action and the
enforced permission agree for custom roles that hold one key but not the other.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
(cherry picked from commit eec128d9c4)

2026-11-11 16:23:39 +08:00

..

common

feat(agent): add opt-in show thinking toggle for Agent v2 chat (#45427)

2026-11-03 09:49:33 +00:00

console

fix(rbac): gate member role assignment on member manage

2026-11-11 16:23:39 +08:00

files

ci: enable Ruff B904 (#44121)

2026-10-19 12:47:53 +00:00

inner_api

refactor(tracing): one trace pipeline behind a minimal provider interface (#44673)

2026-11-02 12:16:49 +08:00

mcp

fix(api): let MCP chatflow generation commit its session (#44636)

2026-10-24 10:56:15 +00:00

openapi

chore: update pat range

2026-11-10 17:44:42 +08:00

service_api

fix(api): use the dataset doc_form when document requests omit it (#45581)

2026-11-05 06:55:00 +00:00

trigger

refactor(api): inject app trigger publication and quota status lifecycle (#45188)

2026-11-09 06:29:12 +00:00

web

fix(web-api): reject internal approval tokens on public HITL endpoints (#44644)

2026-10-30 04:37:17 +00:00

__init__.py

chore(api/controllers): Apply Ruff Formatter. (#7645)

2024-08-26 15:29:10 +08:00

API_SCHEMA_GUIDE.md

test(api): align unit and E2E suites with production structure (#44605)

2026-10-23 08:00:15 +00:00

fastopenapi.py

chore(api): Fix several typing errors (#37119)

2026-06-06 01:44:32 +00:00