feat(app): support app resource permission snapshots and runtime authorization - #7559
Open
DigHuang wants to merge 3 commits into
Open
feat(app): support app resource permission snapshots and runtime authorization#7559DigHuang wants to merge 3 commits into
DigHuang wants to merge 3 commits into
Conversation
Coverage Report
File CoverageNo changed files found. |
|
✅ Admin Preview Image Ready! 🕒 Time: 2026-09-03 23:23:21 (UTC+8) |
DigHuang
force-pushed
the
feat/app-permission
branch
4 times, most recently
from
August 21, 2026 03:32
bff8b71 to
e7a5d50
Compare
|
✅ Build and publish successful - Preview fastgpt Image: 🕒 Time: 2026-09-03 20:26:53 (UTC+8) |
DigHuang
force-pushed
the
feat/app-permission
branch
19 times, most recently
from
August 26, 2026 06:04
f2f0d5f to
f9b9a95
Compare
DigHuang
marked this pull request as ready for review
August 26, 2026 06:04
DigHuang
force-pushed
the
feat/app-permission
branch
2 times, most recently
from
August 26, 2026 09:27
d58da43 to
b49afa8
Compare
DigHuang
force-pushed
the
feat/app-permission
branch
12 times, most recently
from
August 28, 2026 03:49
072cb23 to
a44363c
Compare
|
✅ Docs preview deployed 🔗 👀 Click here to visit preview 🕒 Time: 2026-09-03 20:20:54 (UTC+8) |
DigHuang
force-pushed
the
feat/app-permission
branch
7 times, most recently
from
September 3, 2026 04:19
3647e3b to
68a4408
Compare
…orization feat(app): complete resource permission checks and runtime authorization feat(app): complete resource permission checks and runtime authorization feat(app): optimize resource migration batching and support system skill authorization feat(app): migrate workflow state to versions and enforce resource permissions fix(app): complete version workflow resource migration fix(app): align resource lookup id queries fix(app): align resource lookup id queries
feat: resource ACL markers and draft concurrency Introduce resource-level permission markers and optimistic draft checks. - Add permissionDenied flag to resource/type schemas (skills, datasets, tools) and propagate through rewriteAppWorkflowToDetail. - Perform viewer-side permission hints for snapshot-external resources; normalize child tool ids into parent tool snapshot entries. - Treat invalid stored snapshots as empty to avoid bypassing publish-time ACL checks; resolveStoredAppResources now merges and normalizes legacy ids. - Publish API accepts draftVersionId for optimistic concurrency and enforces matchedCount checks on updates (autoSave & publish). - Load draft chatConfig for workflow debug when client omits it. - Frontend: show permission-denied UI, workflow check supports resource_no_permission. - Tests updated/added to cover behaviors. feat(app): replace draftVersionId pointer with latest-version reads fix: CAS update for published app version
DigHuang
force-pushed
the
feat/app-permission
branch
from
September 3, 2026 15:16
de4cb6f to
e3b2065
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.