Skip to content

feat: application permission for system and workspace #7519

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
peslyn merged 1 commit into from
Oct 28, 2026
Merged

feat: application permission for system and workspace #7519

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 18 additions & 5 deletions ui/src/components/business/folder-tree/index.vue
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,19 @@ import VirtualizedTree from './VirtualizedTree.vue'
import FolderFormDialog from './FolderFormDialog.vue'
import ResourceAuthorizationDrawer from '@/components/business/resource-authorization-drawer/index.vue'
import { useStore } from '@/stores'
import { perm } from '@/permission'
import { RESOURCE_TYPE } from '@/api/enums'

const folderPermission = computed(() => {
switch (props.source) {
case RESOURCE_TYPE.APPLICATION:
return perm.application.workspace
case RESOURCE_TYPE.KNOWLEDGE:
return perm.knowledge.workspace
default:
return perm.tool.workspace
}
})

const MoveToDialog = defineAsyncComponent(() => import('./MoveToDialog.vue'))

Expand Down Expand Up @@ -416,23 +429,23 @@ defineExpose({ refresh: loadFolders, openCreate: handleOpenCreateFolder })
</template>

<template v-if="canEdit" #action-dropdown="{ row }">
<MkDropdownItem @click="handleOpenCreateChildFolder(row)">
<MkDropdownItem v-if="folderPermission.folderCreate(row.id)" @click="handleOpenCreateChildFolder(row)">
<template #icon><MkIcon name="icon_add-folder_outlined" /></template>
<span>创建子文件夹</span>
</MkDropdownItem>
<MkDropdownItem @click="handleOpenEditFolder(row)">
<MkDropdownItem v-if="folderPermission.folderEdit(row.id)" @click="handleOpenEditFolder(row)">
<template #icon><MkIcon name="icon_edit_outlined" /></template>
<span>编辑</span>
</MkDropdownItem>
<MkDropdownItem @click="handleOpenMoveFolder(row)">
<MkDropdownItem v-if="folderPermission.folderEdit(row.id)" @click="handleOpenMoveFolder(row)">
<template #icon><MkIcon name="icon_move2_outlined" /></template>
<span>移动到</span>
</MkDropdownItem>
<MkDropdownItem @click="handleOpenResourceAuthorization(row)">
<MkDropdownItem v-if="folderPermission.folderAuth(row.id)" @click="handleOpenResourceAuthorization(row)">
<template #icon><MkIcon name="icon_passkeys_outlined" /></template>
<span>资源授权</span>
</MkDropdownItem>
<MkDropdownItem divided @click="handleDeleteFolder(row)">
<MkDropdownItem v-if="folderPermission.folderDelete(row.id)" divided @click="handleDeleteFolder(row)">
<template #icon><MkIcon name="icon_delete-trash_outlined" /></template>
<span>删除</span>
</MkDropdownItem>
Expand Down
106 changes: 53 additions & 53 deletions ui/src/permission/core/data.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -192,44 +192,44 @@ export const PermissionConstants = {
LOGIN_AUTH_EDIT: p(Group.LOGIN_AUTH, Group.LOGIN_AUTH, Operate.EDIT, 1),

// ==================== APPLICATION ====================
APPLICATION_READ: p(Group.APPLICATION, Group.APPLICATION, Operate.READ, 1),
APPLICATION_CREATE: p(Group.APPLICATION, Group.APPLICATION, Operate.CREATE, 2),
APPLICATION_COPY: p(Group.APPLICATION, Group.APPLICATION, Operate.COPY, 3),
APPLICATION_EDIT: p(Group.APPLICATION, Group.APPLICATION, Operate.EDIT, 4),
APPLICATION_DELETE: p(Group.APPLICATION, Group.APPLICATION, Operate.DELETE, 5),
APPLICATION_IMPORT: p(Group.APPLICATION, Group.APPLICATION, Operate.IMPORT, 6),
APPLICATION_EXPORT: p(Group.APPLICATION, Group.APPLICATION, Operate.EXPORT, 7),
APPLICATION_PUBLISH: p(Group.APPLICATION, Group.APPLICATION, Operate.PUBLISH, 8),
APPLICATION_BATCH_DELETE: p(Group.APPLICATION, Group.APPLICATION, Operate.BATCH_DELETE, 9),
APPLICATION_BATCH_MOVE: p(Group.APPLICATION, Group.APPLICATION, Operate.BATCH_MOVE, 10),
APPLICATION_RESOURCE_AUTHORIZATION: p(Group.APPLICATION, Group.APPLICATION, Operate.AUTH, 11),
APPLICATION_RELATE_RESOURCE_VIEW: p(Group.APPLICATION, Group.APPLICATION, Operate.RELATE_VIEW, 12),
APPLICATION_TRIGGER_READ: p(Group.APPLICATION, Group.APPLICATION, Operate.TRIGGER_READ, 13),
APPLICATION_TRIGGER_CREATE: p(Group.APPLICATION, Group.APPLICATION, Operate.TRIGGER_CREATE, 14),
APPLICATION_TRIGGER_EDIT: p(Group.APPLICATION, Group.APPLICATION, Operate.TRIGGER_EDIT, 15),
APPLICATION_TRIGGER_DELETE: p(Group.APPLICATION, Group.APPLICATION, Operate.TRIGGER_DELETE, 16),
APPLICATION_PORTAL_UP: p(Group.APPLICATION, Group.APPLICATION, Operate.PORTAL_UP, 17),
APPLICATION_PORTAL_DOWN: p(Group.APPLICATION, Group.APPLICATION, Operate.PORTAL_DOWN, 18),
APPLICATION_FOLDER_READ: p(Group.APPLICATION, Group.FOLDER, Operate.READ, 0),
APPLICATION_FOLDER_CREATE: p(Group.APPLICATION, Group.FOLDER, Operate.CREATE, 1),
APPLICATION_FOLDER_EDIT: p(Group.APPLICATION, Group.FOLDER, Operate.EDIT, 2),
APPLICATION_FOLDER_DELETE: p(Group.APPLICATION, Group.FOLDER, Operate.DELETE, 3),
APPLICATION_FOLDER_AUTH: p(Group.APPLICATION, Group.FOLDER, Operate.AUTH, 4),
APPLICATION_OVERVIEW_READ: p(Group.APPLICATION, Group.OVERVIEW, Operate.READ, 0),
APPLICATION_OVERVIEW_EMBED: p(Group.APPLICATION, Group.OVERVIEW, Operate.EMBED, 1),
APPLICATION_OVERVIEW_ACCESS: p(Group.APPLICATION, Group.OVERVIEW, Operate.ACCESS, 2),
APPLICATION_OVERVIEW_DISPLAY: p(Group.APPLICATION, Group.OVERVIEW, Operate.DISPLAY, 3),
APPLICATION_OVERVIEW_API_KEY: p(Group.APPLICATION, Group.OVERVIEW, Operate.API_KEY, 4),
APPLICATION_OVERVIEW_PUBLIC: p(Group.APPLICATION, Group.OVERVIEW, Operate.PUBLIC_ACCESS, 5),
APPLICATION_ACCESS_READ: p(Group.APPLICATION, Group.ACCESS, Operate.READ, 0),
APPLICATION_ACCESS_EDIT: p(Group.APPLICATION, Group.ACCESS, Operate.EDIT, 1),
APPLICATION_CHAT_USER_READ: p(Group.APPLICATION, Group.CHAT_USER, Operate.READ, 0),
APPLICATION_CHAT_USER_EDIT: p(Group.APPLICATION, Group.CHAT_USER, Operate.EDIT, 1),
APPLICATION_CHAT_LOG_READ: p(Group.APPLICATION, Group.CHAT_LOG, Operate.READ, 0),
APPLICATION_CHAT_LOG_ANNOTATION: p(Group.APPLICATION, Group.CHAT_LOG, Operate.ANNOTATION, 1),
APPLICATION_CHAT_LOG_EXPORT: p(Group.APPLICATION, Group.CHAT_LOG, Operate.EXPORT, 2),
APPLICATION_CHAT_LOG_CLEAR_POLICY: p(Group.APPLICATION, Group.CHAT_LOG, Operate.CLEAR_POLICY, 3),
APPLICATION_CHAT_LOG_ADD_KNOWLEDGE: p(Group.APPLICATION, Group.CHAT_LOG, Operate.ADD_KNOWLEDGE, 4),
APPLICATION_READ: p(Group.APPLICATION, Group.APPLICATION, Operate.READ, 0),
APPLICATION_CREATE: p(Group.APPLICATION, Group.APPLICATION, Operate.CREATE, 1),
APPLICATION_COPY: p(Group.APPLICATION, Group.APPLICATION, Operate.COPY, 2),
APPLICATION_EDIT: p(Group.APPLICATION, Group.APPLICATION, Operate.EDIT, 3),
APPLICATION_DELETE: p(Group.APPLICATION, Group.APPLICATION, Operate.DELETE, 4),
APPLICATION_IMPORT: p(Group.APPLICATION, Group.APPLICATION, Operate.IMPORT, 5),
APPLICATION_EXPORT: p(Group.APPLICATION, Group.APPLICATION, Operate.EXPORT, 6),
APPLICATION_PUBLISH: p(Group.APPLICATION, Group.APPLICATION, Operate.PUBLISH, 7),
APPLICATION_BATCH_DELETE: p(Group.APPLICATION, Group.APPLICATION, Operate.BATCH_DELETE, 8),
APPLICATION_BATCH_MOVE: p(Group.APPLICATION, Group.APPLICATION, Operate.BATCH_MOVE, 9),
APPLICATION_RESOURCE_AUTHORIZATION: p(Group.APPLICATION, Group.APPLICATION, Operate.AUTH, 10),
APPLICATION_RELATE_RESOURCE_VIEW: p(Group.APPLICATION, Group.APPLICATION, Operate.RELATE_VIEW, 11),
APPLICATION_TRIGGER_READ: p(Group.APPLICATION, Group.APPLICATION, Operate.TRIGGER_READ, 12),
APPLICATION_TRIGGER_CREATE: p(Group.APPLICATION, Group.APPLICATION, Operate.TRIGGER_CREATE, 13),
APPLICATION_TRIGGER_EDIT: p(Group.APPLICATION, Group.APPLICATION, Operate.TRIGGER_EDIT, 14),
APPLICATION_TRIGGER_DELETE: p(Group.APPLICATION, Group.APPLICATION, Operate.TRIGGER_DELETE, 15),
APPLICATION_PORTAL_UP: p(Group.APPLICATION, Group.APPLICATION, Operate.PORTAL_UP, 16),
APPLICATION_PORTAL_DOWN: p(Group.APPLICATION, Group.APPLICATION, Operate.PORTAL_DOWN, 17),
APPLICATION_FOLDER_READ: p(Group.APPLICATION, Group.FOLDER, Operate.READ, 18),
APPLICATION_FOLDER_CREATE: p(Group.APPLICATION, Group.FOLDER, Operate.CREATE, 19),
APPLICATION_FOLDER_EDIT: p(Group.APPLICATION, Group.FOLDER, Operate.EDIT, 20),
APPLICATION_FOLDER_DELETE: p(Group.APPLICATION, Group.FOLDER, Operate.DELETE, 21),
APPLICATION_FOLDER_AUTH: p(Group.APPLICATION, Group.FOLDER, Operate.AUTH, 22),
APPLICATION_OVERVIEW_READ: p(Group.APPLICATION, Group.OVERVIEW, Operate.READ, 23),
APPLICATION_OVERVIEW_EMBED: p(Group.APPLICATION, Group.OVERVIEW, Operate.EMBED, 24),
APPLICATION_OVERVIEW_ACCESS: p(Group.APPLICATION, Group.OVERVIEW, Operate.ACCESS, 25),
APPLICATION_OVERVIEW_DISPLAY: p(Group.APPLICATION, Group.OVERVIEW, Operate.DISPLAY, 26),
APPLICATION_OVERVIEW_API_KEY: p(Group.APPLICATION, Group.OVERVIEW, Operate.API_KEY, 27),
APPLICATION_OVERVIEW_PUBLIC: p(Group.APPLICATION, Group.OVERVIEW, Operate.PUBLIC_ACCESS, 28),
APPLICATION_ACCESS_READ: p(Group.APPLICATION, Group.ACCESS, Operate.READ, 29),
APPLICATION_ACCESS_EDIT: p(Group.APPLICATION, Group.ACCESS, Operate.EDIT, 30),
APPLICATION_CHAT_USER_READ: p(Group.APPLICATION, Group.CHAT_USER, Operate.READ, 31),
APPLICATION_CHAT_USER_EDIT: p(Group.APPLICATION, Group.CHAT_USER, Operate.EDIT, 32),
APPLICATION_CHAT_LOG_READ: p(Group.APPLICATION, Group.CHAT_LOG, Operate.READ, 33),
APPLICATION_CHAT_LOG_ANNOTATION: p(Group.APPLICATION, Group.CHAT_LOG, Operate.ANNOTATION, 34),
APPLICATION_CHAT_LOG_EXPORT: p(Group.APPLICATION, Group.CHAT_LOG, Operate.EXPORT, 35),
APPLICATION_CHAT_LOG_CLEAR_POLICY: p(Group.APPLICATION, Group.CHAT_LOG, Operate.CLEAR_POLICY, 36),
APPLICATION_CHAT_LOG_ADD_KNOWLEDGE: p(Group.APPLICATION, Group.CHAT_LOG, Operate.ADD_KNOWLEDGE, 37),

// ==================== OTHER ====================
ABOUT_READ: p(Group.OTHER, Group.OTHER, Operate.ABOUT, 0),
Expand Down Expand Up @@ -349,21 +349,21 @@ export const PermissionConstants = {
RESOURCE_APPLICATION_RELATE_RESOURCE_VIEW: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_RES_APPLICATION, Operate.RELATE_VIEW, 11),
RESOURCE_APPLICATION_PORTAL_UP: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_RES_APPLICATION, Operate.PORTAL_UP, 12),
RESOURCE_APPLICATION_PORTAL_DOWN: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_RES_APPLICATION, Operate.PORTAL_DOWN, 13),
RESOURCE_APPLICATION_OVERVIEW_READ: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.READ, 0),
RESOURCE_APPLICATION_OVERVIEW_EMBED: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.EMBED, 1),
RESOURCE_APPLICATION_OVERVIEW_ACCESS: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.ACCESS, 2),
RESOURCE_APPLICATION_OVERVIEW_DISPLAY: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.DISPLAY, 3),
RESOURCE_APPLICATION_OVERVIEW_API_KEY: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.API_KEY, 4),
RESOURCE_APPLICATION_OVERVIEW_PUBLIC: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.PUBLIC_ACCESS, 5),
RESOURCE_APPLICATION_ACCESS_READ: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_ACCESS, Operate.READ, 0),
RESOURCE_APPLICATION_ACCESS_EDIT: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_ACCESS, Operate.EDIT, 1),
RESOURCE_APPLICATION_CHAT_USER_READ: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_USER, Operate.READ, 0),
RESOURCE_APPLICATION_CHAT_USER_EDIT: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_USER, Operate.EDIT, 1),
RESOURCE_APPLICATION_CHAT_LOG_READ: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_LOG, Operate.READ, 0),
RESOURCE_APPLICATION_CHAT_LOG_ADD_KNOWLEDGE: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_LOG, Operate.ADD_KNOWLEDGE, 1),
RESOURCE_APPLICATION_CHAT_LOG_ANNOTATION: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_LOG, Operate.ANNOTATION, 2),
RESOURCE_APPLICATION_CHAT_LOG_EXPORT: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_LOG, Operate.EXPORT, 3),
RESOURCE_APPLICATION_CHAT_LOG_CLEAR_POLICY: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_LOG, Operate.CLEAR_POLICY, 4),
RESOURCE_APPLICATION_OVERVIEW_READ: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.READ, 14),
RESOURCE_APPLICATION_OVERVIEW_EMBED: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.EMBED, 15),
RESOURCE_APPLICATION_OVERVIEW_ACCESS: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.ACCESS, 16),
RESOURCE_APPLICATION_OVERVIEW_DISPLAY: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.DISPLAY, 17),
RESOURCE_APPLICATION_OVERVIEW_API_KEY: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.API_KEY, 18),
RESOURCE_APPLICATION_OVERVIEW_PUBLIC: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_OVERVIEW, Operate.PUBLIC_ACCESS, 19),
RESOURCE_APPLICATION_ACCESS_READ: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_ACCESS, Operate.READ, 20),
RESOURCE_APPLICATION_ACCESS_EDIT: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_ACCESS, Operate.EDIT, 21),
RESOURCE_APPLICATION_CHAT_USER_READ: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_USER, Operate.READ, 22),
RESOURCE_APPLICATION_CHAT_USER_EDIT: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_USER, Operate.EDIT, 23),
RESOURCE_APPLICATION_CHAT_LOG_READ: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_LOG, Operate.READ, 24),
RESOURCE_APPLICATION_CHAT_LOG_ADD_KNOWLEDGE: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_LOG, Operate.ADD_KNOWLEDGE, 25),
RESOURCE_APPLICATION_CHAT_LOG_ANNOTATION: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_LOG, Operate.ANNOTATION, 26),
RESOURCE_APPLICATION_CHAT_LOG_EXPORT: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_LOG, Operate.EXPORT, 27),
RESOURCE_APPLICATION_CHAT_LOG_CLEAR_POLICY: p(Group.SYSTEM_RES_APPLICATION, Group.SYSTEM_CHAT_LOG, Operate.CLEAR_POLICY, 28),

// ==================== SYSTEM_RES_KNOWLEDGE ====================
RESOURCE_KNOWLEDGE_READ: p(Group.SYSTEM_RES_KNOWLEDGE, Group.SYSTEM_RES_KNOWLEDGE, Operate.READ, 0),
Expand Down
5 changes: 4 additions & 1 deletion ui/src/permission/core/index.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,10 @@ export const buildBaseResourcePermission = (permission: Permission, resourceId:
? buildBasePermission(permission, workspaceId)
: AggregatePermission.builder()
.addPermission(permission.newResourcePermission(workspaceId, resourceId))
.addRole(RoleConstants.ADMIN)
.addPermission(AggregatePermission.builder().addRole(new Role(RoleConstants.EXTENDS_WORKSPACE_MANAGE.name, workspaceId))
.addPermission(new Permission(permission.group,permission.subGroup,permission.operate,permission.bitIndex,workspaceId))
.compare(Compare.AND)
.build())
.addRole(new Role(RoleConstants.WORKSPACE_MANAGE.name, workspaceId))
.compare(Compare.OR)
.build()
Expand Down
8 changes: 6 additions & 2 deletions ui/src/permission/modules/application/index.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,12 @@
import workspace from './workspace'
import system from './system'

export default { workspace,
export default {
/**
* 工作空间「智能体」权限
*/
workspace,
/**
* 系统「应用」权限
* 系统「智能体」权限
* */
system }
80 changes: 79 additions & 1 deletion ui/src/permission/modules/application/system.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,43 +21,121 @@ const system = {
folderManage: () => false,

// —— 资源操作 ——
/**
* 系统「智能体」编辑权限
*/
edit: () => canSys(P.RESOURCE_APPLICATION_EDIT),
/**
* 系统「智能体」删除权限
*/
delete: () => canSys(P.RESOURCE_APPLICATION_DELETE),
/**
* 系统「智能体」复制权限
*/
copy: () => canSys(P.RESOURCE_APPLICATION_COPY),
/**
* 系统「智能体」导入权限
*/
export: () => canSys(P.RESOURCE_APPLICATION_EXPORT),
/**
* 系统「智能体」发布权限
*/
publish: () => canSys(P.RESOURCE_APPLICATION_PUBLISH),
/**
* 系统「智能体」发布到门户权限
*/
portalUp: () => canSys(P.RESOURCE_APPLICATION_PORTAL_UP),
/**
* 系统「智能体」从门户下架权限
*/
portalDown: () => canSys(P.RESOURCE_APPLICATION_PORTAL_DOWN),
/**
* 系统「智能体」资源授权权限
*/
auth: () => canSys(P.RESOURCE_APPLICATION_AUTH),
/**
* 系统「智能体」查看关联资源权限
*/
relateMap: () => canSys(P.RESOURCE_APPLICATION_RELATE_RESOURCE_VIEW),
debug: () => canSys(P.RESOURCE_APPLICATION_EDIT),

// —— 触发器 ——
/**
* 系统「智能体」「触发器」只读权限
*/
triggerRead: () => canSys(P.RESOURCE_APPLICATION_TRIGGER_READ),
/**
* 系统「智能体」「触发器」创建权限
*/
triggerCreate: () => canSys(P.RESOURCE_APPLICATION_TRIGGER_CREATE),
/**
* 系统「智能体」「触发器」编辑权限
*/
triggerEdit: () => canSys(P.RESOURCE_APPLICATION_TRIGGER_EDIT),
/**
* 系统「智能体」「触发器」删除权限
*/
triggerDelete: () => canSys(P.RESOURCE_APPLICATION_TRIGGER_DELETE),

// —— 概览 ——
/**
* 系统「智能体」「概览」只读权限
*/
overviewRead: () => canSys(P.RESOURCE_APPLICATION_OVERVIEW_READ),
/**
* 系统「智能体」「概览」嵌入第三方权限
*/
overviewEmbed: () => canSys(P.RESOURCE_APPLICATION_OVERVIEW_EMBED),
/**
* 系统「智能体」「概览」访问限制权限
*/
overviewAccess: () => canSys(P.RESOURCE_APPLICATION_OVERVIEW_ACCESS),
/**
* 系统「智能体」「概览」显示设置权限
*/
overviewDisplay: () => canSys(P.RESOURCE_APPLICATION_OVERVIEW_DISPLAY),
/**
* 系统「智能体」「概览」API KEY权限
*/
overviewApiKey: () => canSys(P.RESOURCE_APPLICATION_OVERVIEW_API_KEY),

// —— 访问 / 访客 / 对话日志 ——
/**
* 系统「智能体」「智能体接入」只读权限
*/
accessRead: () => canSys(P.RESOURCE_APPLICATION_ACCESS_READ),
/**
* 系统「智能体」「智能体接入」编辑权限
*/
accessEdit: () => canSys(P.RESOURCE_APPLICATION_ACCESS_EDIT),
/**
* 系统「智能体」「对话用户」只读权限
*/
chatUserRead: () => canSys(P.RESOURCE_APPLICATION_CHAT_USER_READ),
/**
* 系统「智能体」「对话用户」编辑权限
*/
chatUserEdit: () => canSys(P.RESOURCE_APPLICATION_CHAT_USER_EDIT),
/**
* 系统「智能体」「对话日志」只读权限
*/
chatLogRead: () => canSys(P.RESOURCE_APPLICATION_CHAT_LOG_READ),
/**
* 系统「智能体」「对话日志」编辑权限
*/
chatLogClear: () => canSys(P.RESOURCE_APPLICATION_CHAT_LOG_CLEAR_POLICY),
/**
* 系统「智能体」「对话日志」导出权限
*/
chatLogExport: () => canSys(P.RESOURCE_APPLICATION_CHAT_LOG_EXPORT),
/**
* 系统「智能体」「对话日志」添加到知识库权限
*/
chatLogAddKnowledge: () => canSys(P.RESOURCE_APPLICATION_CHAT_LOG_ADD_KNOWLEDGE),

// —— 组合：跳转/进入应用 ——
/**
* 系统「应用资源管理」（系统 > 资源管理 > 应用）只读权限
* 系统「智能体」只读权限
* */
read: () => canSys(P.RESOURCE_APPLICATION_READ) && hasEdition(Edition.EE),
}
Expand Down
Loading
Loading