dify/api/controllers at 32a1a61d65a1eec65a6b4f6ebaf0659107dd3c7c - dify

mirror of https://github.com/langgenius/dify.git synced 2026-02-28 04:15:10 +00:00

Files

QuantumGhost 32a1a61d65 security(api): enforce privilege validation for dataset-to-pipeline transformation

The transformation from classic dataset to knowledge pipeline represents an irreversible
write operation that permanently alters the dataset structure. To prevent unauthorized
modifications, this change implements strict privilege validation in `RagPipelineTransformApi`.

Only users with editor privileges or dataset operator roles are authorized to execute
this transformation, ensuring proper access control for this critical operation.

2025-09-12 17:07:26 +08:00

common

feat: API docs for service api (#24425 )

2025-08-25 09:26:54 +08:00

console

security(api): enforce privilege validation for dataset-to-pipeline transformation

2025-09-12 17:07:26 +08:00

files

chore(api): migrate import for db

2025-08-31 16:46:25 +08:00

inner_api

fix: tenant_id was not specific when retrieval end-user in plugin backwards invocation wraps (#25377 )