zlei6/ragflow
1
0
Fork 0
mirror of https://github.com/infiniflow/ragflow.git synced 2026-06-29 23:41:12 +08:00
Code Issues Packages Projects Releases Wiki Activity

Revert "Fix agent permission issue" (#14602)

Browse Source 
Reverts infiniflow/ragflow#14597
This commit is contained in:
Wang Qi
2026-05-06 20:52:54 +08:00
committed by GitHub
parent 3e396c0a72
commit 15dcdd7b5b
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
api/apps/restful_apis/agent_api.py
View File

@@ -433,7 +433,7 @@ def get_agent_component_input_form(agent_id, component_id, tenant_id):
exists, user_canvas = UserCanvasService.get_by_id(agent_id)
if not exists:
return get_data_error_result(message="canvas not found.")
if not UserCanvasService.accessible(agent_id, tenant_id):
if not UserCanvasService.query(user_id=tenant_id, id=agent_id):
return get_json_result(
data=False,
message="Only owner of canvas authorized for this operation.",
@@ -594,7 +594,7 @@ def get_agent_logs(agent_id, message_id, tenant_id):
@login_required
@add_tenant_id_to_kwargs
def delete_agent(agent_id, tenant_id):
if not UserCanvasService.accessible(agent_id, tenant_id):
if not UserCanvasService.query(user_id=tenant_id, id=agent_id):
return get_json_result(
data=False,
message="Only owner of canvas authorized for this operation.",
@@ -626,7 +626,7 @@ async def update_agent(agent_id, tenant_id):
if req.get("title") is not None:
req["title"] = req["title"].strip()
if not UserCanvasService.accessible(agent_id, tenant_id):
if not UserCanvasService.query(user_id=tenant_id, id=agent_id):
return get_json_result(
data=False,
message="Only owner of canvas authorized for this operation.",
@@ -935,7 +935,7 @@ async def agent_chat_completion(tenant_id, agent_id=None):
runtime_user_id = req.get("user_id") or tenant_id
user_id = str(runtime_user_id)
custom_header = req.get("custom_header", "")
if not UserCanvasService.accessible(agent_id, tenant_id):
if not await thread_pool_exec(UserCanvasService.accessible, agent_id, tenant_id):
return get_json_result(
data=False,
message="Only owner of canvas authorized for this operation.",