mirror of
https://github.com/infiniflow/ragflow.git
synced 2026-08-08 00:18:12 +08:00
611e0596f6
### Summary modify docs display add some images delete enterprise docs standardize capitalization
1.1 KiB
1.1 KiB
sidebar_position, sidebar_label, title
| sidebar_position | sidebar_label | title |
|---|---|---|
| 5 | Permission Effective Rules | Permission Effective Rules |
Permission Effective Rules
When a user performs an operation on a resource, RAGFlow evaluates permissions in the following order:
- Whether the user has formally joined the team that owns the resource.
- Whether the resource sharing scope allows team access.
- Whether the user has knowledge base-level, resource-level, or collaborator-level Read, Write, or Manage permission.
- Whether the target document has additional document-level Read, Write, or Manage permission requirements.
- Whether the current operation is allowed by the permission table for that resource type.
The resource owner always has all permissions. If a resource is set to Only me, only the owner can access it. If a resource is set to Team, only team members who meet the permission conditions can access it.
If finer-grained permissions exist, such as document-level permissions in a knowledge base, those permissions continue to apply on top of resource access permission.