mirror of
https://github.com/infiniflow/ragflow.git
synced 2025-12-02 18:06:57 +00:00
7c620bdc69
### What problem does this PR solve? Unexpected operation of document management. ### Type of change - [x] Bug Fix (non-breaking change which fixes an issue)
60 lines
1.9 KiB
Python
60 lines
1.9 KiB
Python
#
|
|
# Copyright 2025 The InfiniFlow Authors. All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
|
|
|
|
from api.db import TenantPermission
|
|
from api.db.db_models import File, Knowledgebase
|
|
from api.db.services.file_service import FileService
|
|
from api.db.services.knowledgebase_service import KnowledgebaseService
|
|
from api.db.services.user_service import TenantService
|
|
|
|
|
|
def check_kb_team_permission(kb: dict | Knowledgebase, other: str) -> bool:
|
|
kb = kb.to_dict() if isinstance(kb, Knowledgebase) else kb
|
|
|
|
kb_tenant_id = kb["tenant_id"]
|
|
|
|
if kb_tenant_id == other:
|
|
return True
|
|
|
|
if kb["permission"] != TenantPermission.TEAM:
|
|
return False
|
|
|
|
joined_tenants = TenantService.get_joined_tenants_by_user_id(other)
|
|
return any(tenant["tenant_id"] == kb_tenant_id for tenant in joined_tenants)
|
|
|
|
|
|
def check_file_team_permission(file: dict | File, other: str) -> bool:
|
|
file = file.to_dict() if isinstance(file, File) else file
|
|
|
|
file_tenant_id = file["tenant_id"]
|
|
if file_tenant_id == other:
|
|
return True
|
|
|
|
file_id = file["id"]
|
|
|
|
kb_ids = [kb_info["kb_id"] for kb_info in FileService.get_kb_id_by_file_id(file_id)]
|
|
|
|
for kb_id in kb_ids:
|
|
ok, kb = KnowledgebaseService.get_by_id(kb_id)
|
|
if not ok:
|
|
continue
|
|
|
|
if check_kb_team_permission(kb, other):
|
|
return True
|
|
|
|
return False
|