From 7756d02b6a97cd01d01548facb68ffa78ffd41e5 Mon Sep 17 00:00:00 2001
From: wangdan-fit2cloud <dan.wang@fit2cloud.com>
Date: Wed, 27 Aug 2025 15:10:31 +0800
Subject: [PATCH] feat: Resource management authorization

---
 .../resource-authorization.ts                 |  55 +++++++++
 ui/src/api/system/resource-authorization.ts   |  49 +-------
 .../api/workspace/resource-authorization.ts   |  57 +++++++++
 .../component/chat-input-operate/index.vue    |   5 +-
 .../generate-related-dialog/index.vue         |   1 -
 .../resource-authorization-drawer/index.vue   |  56 +++++----
 ui/src/utils/dynamics-api/shared-api.ts       |   8 +-
 .../XPackDisplaySettingDialog.vue             |   2 +-
 ui/src/views/chat-log/index.vue               | 115 +++++++++---------
 ui/src/views/chat/component/HistoryPanel.vue  |  11 +-
 ui/src/views/document/UploadDocument.vue      |   1 -
 .../ApplicationResourceIndex.vue              |  28 ++++-
 .../KnowledgeResourceIndex.vue                |  24 +++-
 .../ModelResourceIndex.vue                    |  79 +++++++-----
 .../ToolResourceIndex.vue                     |  42 +++++--
 ui/src/views/tool/McpToolFormDrawer.vue       |   1 -
 ui/src/views/tool/ToolFormDrawer.vue          |   1 -
 ui/src/workflow/nodes/ai-chat-node/index.vue  |   3 +
 18 files changed, 350 insertions(+), 188 deletions(-)
 create mode 100644 ui/src/api/system-resource-management/resource-authorization.ts
 create mode 100644 ui/src/api/workspace/resource-authorization.ts

diff --git a/ui/src/api/system-resource-management/resource-authorization.ts b/ui/src/api/system-resource-management/resource-authorization.ts
new file mode 100644
index 000000000..0ccb71e18
--- /dev/null
+++ b/ui/src/api/system-resource-management/resource-authorization.ts
@@ -0,0 +1,55 @@
+import { Result } from '@/request/Result'
+import { get, put, post, del } from '@/request/index'
+import type { Ref } from 'vue'
+import type { pageRequest } from '@/api/type/common'
+const prefix = 'system/workspace'
+
+/**
+ * 系统资源授权获取资源权限
+ * @query 参数
+ */
+const getResourceAuthorization: (
+  workspace_id: string,
+  target: string,
+  resource: string,
+  page: pageRequest,
+  params?: any,
+  loading?: Ref<boolean>,
+) => Promise<Result<any>> = (workspace_id, target, resource, page, params, loading) => {
+  return get(
+    `${prefix}/${workspace_id}/resource_management/resource/${target}/resource/${resource}/${page.current_page}/${page.page_size}`,
+    params,
+    loading,
+  )
+}
+/**
+ * 系统资源授权修改成员权限
+ * @param 参数 member_id
+ * @param 参数 {
+     [
+      {
+        "target_id": "string",
+        "permission": "NOT_AUTH"
+      }
+    ]
+        }
+ */
+const putResourceAuthorization: (
+  workspace_id: string,
+  target: string,
+  resource: string,
+  body: any,
+  loading?: Ref<boolean>,
+) => Promise<Result<any>> = (workspace_id, target, resource, body, loading) => {
+  return put(
+    `${prefix}/${workspace_id}/resource_management/resource/${target}/resource/${resource}`,
+    body,
+    {},
+    loading,
+  )
+}
+
+export default {
+  getResourceAuthorization,
+  putResourceAuthorization,
+}
diff --git a/ui/src/api/system/resource-authorization.ts b/ui/src/api/system/resource-authorization.ts
index dc9d3b357..c9efbbd6b 100644
--- a/ui/src/api/system/resource-authorization.ts
+++ b/ui/src/api/system/resource-authorization.ts
@@ -4,52 +4,6 @@ import type { Ref } from 'vue'
 import type { pageRequest } from '@/api/type/common'
 const prefix = '/workspace'
 
-/**
- * 工作空间下各资源获取资源权限
- * @query 参数
- */
-const getWorkspaceResourceAuthorization: (
-  workspace_id: string,
-  target: string,
-  resource: string,
-  page: pageRequest,
-  params?: any,
-  loading?: Ref<boolean>,
-) => Promise<Result<any>> = (workspace_id, target, resource, page, params, loading) => {
-  return get(
-    `${prefix}/${workspace_id}/resource_user_permission/resource/${target}/resource/${resource}/${page.current_page}/${page.page_size}`,
-    params,
-    loading,
-  )
-}
-
-/**
- * 工作空间下各资源修改成员权限
- * @param 参数 member_id
- * @param 参数 {
-     [
-      {
-        "user_id": "string",
-        "permission": "NOT_AUTH"
-      }
-    ]
-  }
- */
-const putWorkspaceResourceAuthorization: (
-  workspace_id: string,
-  target: string,
-  resource: string,
-  body: any,
-  loading?: Ref<boolean>,
-) => Promise<Result<any>> = (workspace_id, target, resource, body, loading) => {
-  return put(
-    `${prefix}/${workspace_id}/resource_user_permission/resource/${target}/resource/${resource}`,
-    body,
-    {},
-    loading,
-  )
-}
-
 /**
  * 系统资源授权获取资源权限
  * @query 参数
@@ -148,6 +102,5 @@ export default {
   getUserList,
   getUserMember,
   getSystemFolder,
-  getWorkspaceResourceAuthorization,
-  putWorkspaceResourceAuthorization
+
 }
diff --git a/ui/src/api/workspace/resource-authorization.ts b/ui/src/api/workspace/resource-authorization.ts
new file mode 100644
index 000000000..6ca07686b
--- /dev/null
+++ b/ui/src/api/workspace/resource-authorization.ts
@@ -0,0 +1,57 @@
+import { Result } from '@/request/Result'
+import { get, put, post, del } from '@/request/index'
+import type { Ref } from 'vue'
+import type { pageRequest } from '@/api/type/common'
+const prefix = '/workspace'
+
+
+/**
+ * 工作空间下各资源获取资源权限
+ * @query 参数
+ */
+const getResourceAuthorization: (
+  workspace_id: string,
+  target: string,
+  resource: string,
+  page: pageRequest,
+  params?: any,
+  loading?: Ref<boolean>,
+) => Promise<Result<any>> = (workspace_id, target, resource, page, params, loading) => {
+  return get(
+    `${prefix}/${workspace_id}/resource_user_permission/resource/${target}/resource/${resource}/${page.current_page}/${page.page_size}`,
+    params,
+    loading,
+  )
+}
+
+/**
+ * 工作空间下各资源修改成员权限
+ * @param 参数 member_id
+ * @param 参数 {
+     [
+      {
+        "user_id": "string",
+        "permission": "NOT_AUTH"
+      }
+    ]
+  }
+ */
+const putResourceAuthorization: (
+  workspace_id: string,
+  target: string,
+  resource: string,
+  body: any,
+  loading?: Ref<boolean>,
+) => Promise<Result<any>> = (workspace_id, target, resource, body, loading) => {
+  return put(
+    `${prefix}/${workspace_id}/resource_user_permission/resource/${target}/resource/${resource}`,
+    body,
+    {},
+    loading,
+  )
+}
+
+export default {
+  getResourceAuthorization,
+  putResourceAuthorization
+}
diff --git a/ui/src/components/ai-chat/component/chat-input-operate/index.vue b/ui/src/components/ai-chat/component/chat-input-operate/index.vue
index db994c96f..127f0e3e3 100644
--- a/ui/src/components/ai-chat/component/chat-input-operate/index.vue
+++ b/ui/src/components/ai-chat/component/chat-input-operate/index.vue
@@ -427,11 +427,10 @@ const uploadFile = async (file: any, fileList: any) => {
     fileList.splice(0, fileList.length, ...fileList.slice(0, maxFiles))
     return
   }
-  console.log(fileList)
   if (fileList.filter((f: any) => f.size == 0).length > 0) {
     // MB
-    MsgWarning(t('chat.uploadFile.sizeLimit2') + fileLimit + 'MB')
-    // 只保留未超出大小限制的文件
+    MsgWarning(t('chat.uploadFile.sizeLimit2'))
+    // 空文件上传过滤
     fileList.splice(0, fileList.length, ...fileList.filter((f: any) => f.size > 0))
     return
   }
diff --git a/ui/src/components/generate-related-dialog/index.vue b/ui/src/components/generate-related-dialog/index.vue
index 12baa0229..d41826316 100644
--- a/ui/src/components/generate-related-dialog/index.vue
+++ b/ui/src/components/generate-related-dialog/index.vue
@@ -77,7 +77,6 @@ import { groupBy } from 'lodash'
 import { MsgSuccess } from '@/utils/message'
 import { t } from '@/locales'
 import type { FormInstance } from 'element-plus'
-import modelResourceApi from '@/api/system-resource-management/model'
 import { loadSharedApi } from '@/utils/dynamics-api/shared-api'
 
 const props = defineProps<{
diff --git a/ui/src/components/resource-authorization-drawer/index.vue b/ui/src/components/resource-authorization-drawer/index.vue
index 4eb300141..b6213ff18 100644
--- a/ui/src/components/resource-authorization-drawer/index.vue
+++ b/ui/src/components/resource-authorization-drawer/index.vue
@@ -22,10 +22,7 @@
         >
           <el-option :label="$t('views.userManage.userForm.nick_name.label')" value="nick_name" />
           <el-option :label="$t('views.login.loginForm.username.label')" value="username" />
-          <el-option
-            :label="$t('views.model.modelForm.permissionType.label')"
-            value="permission"
-          />
+          <el-option :label="$t('views.model.modelForm.permissionType.label')" value="permission" />
         </el-select>
         <el-input
           v-if="searchType === 'nick_name'"
@@ -149,15 +146,26 @@
 </template>
 <script setup lang="ts">
 import { ref, onMounted, watch, computed, reactive } from 'vue'
+import { useRoute } from 'vue-router'
 import { getPermissionOptions } from '@/views/system/resource-authorization/constant'
 import AuthorizationApi from '@/api/system/resource-authorization'
 import { MsgSuccess, MsgConfirm } from '@/utils/message'
 import { t } from '@/locales'
+import { loadSharedApi } from '@/utils/dynamics-api/shared-api'
+const route = useRoute()
 import useStore from '@/stores'
 const { user } = useStore()
 const props = defineProps<{
   type: string
 }>()
+
+const apiType = computed(() => {
+  if (route.path.includes('resource-management')) {
+    return 'systemManage'
+  } else {
+    return 'workspace'
+  }
+})
 const permissionOptions = computed(() => {
   return getPermissionOptions()
 })
@@ -250,16 +258,12 @@ function permissionsHandle(val: any, row: any) {
 
 function submitPermissions(obj: any) {
   const workspaceId = user.getWorkspaceId() || 'default'
-  AuthorizationApi.putWorkspaceResourceAuthorization(
-    workspaceId,
-    targetId.value,
-    props.type,
-    obj,
-    loading,
-  ).then(() => {
-    MsgSuccess(t('common.submitSuccess'))
-    getPermissionList()
-  })
+  loadSharedApi({ type: 'resourceAuthorization', systemType: apiType.value })
+    .putResourceAuthorization(workspaceId, targetId.value, props.type, obj, loading)
+    .then(() => {
+      MsgSuccess(t('common.submitSuccess'))
+      getPermissionList()
+    })
 }
 const getPermissionList = () => {
   const workspaceId = user.getWorkspaceId() || 'default'
@@ -267,17 +271,19 @@ const getPermissionList = () => {
   if (searchForm.value[searchType.value]) {
     params[searchType.value] = searchForm.value[searchType.value]
   }
-  AuthorizationApi.getWorkspaceResourceAuthorization(
-    workspaceId,
-    targetId.value,
-    props.type,
-    paginationConfig,
-    params,
-    loading,
-  ).then((res) => {
-    permissionData.value = res.data.records || []
-    paginationConfig.total = res.data.total || 0
-  })
+  loadSharedApi({ type: 'resourceAuthorization', systemType: apiType.value })
+    .getResourceAuthorization(
+      workspaceId,
+      targetId.value,
+      props.type,
+      paginationConfig,
+      params,
+      loading,
+    )
+    .then((res: any) => {
+      permissionData.value = res.data.records || []
+      paginationConfig.total = res.data.total || 0
+    })
 }
 
 const open = (id: string) => {
diff --git a/ui/src/utils/dynamics-api/shared-api.ts b/ui/src/utils/dynamics-api/shared-api.ts
index 00211dcb5..32af58aad 100644
--- a/ui/src/utils/dynamics-api/shared-api.ts
+++ b/ui/src/utils/dynamics-api/shared-api.ts
@@ -9,6 +9,7 @@ import applicationWorkspaceApi from '@/api/application/application'
 import applicationKeyWorkspaceApi from '@/api/application/application-key'
 import workflowVersionWorkspaceApi from '@/api/application/workflow-version'
 import chatLogWorkspaceApi from '@/api/application/chat-log'
+import resourceAuthorizationWorkspaceApi from '@/api/workspace/resource-authorization'
 import sharedWorkspaceApi from '@/api/shared-workspace'
 import toolSystemShareApi from '@/api/system-shared/tool'
 import modelSystemShareApi from '@/api/system-shared/model'
@@ -29,7 +30,8 @@ import chatUserResourceApi from '@/api/system-resource-management/chat-user'
 import applicationResourceApi from '@/api/system-resource-management/application'
 import applicationKeyResourceApi from '@/api/system-resource-management/application-key'
 import workflowVersionResourceApi from '@/api/system-resource-management/workflow-version'
-import chatLogWResourceApi from '@/api/system-resource-management/chat-log'
+import chatLogResourceApi from '@/api/system-resource-management/chat-log'
+import resourceAuthorizationResourceApi from '@/api/system-resource-management/resource-authorization'
 
 // 普通 API
 const workspaceApiMap = {
@@ -45,6 +47,7 @@ const workspaceApiMap = {
   applicationKey: applicationKeyWorkspaceApi,
   workflowVersion: workflowVersionWorkspaceApi,
   chatLog: chatLogWorkspaceApi,
+  resourceAuthorization: resourceAuthorizationWorkspaceApi,
 } as any
 
 // 系统分享 API
@@ -71,7 +74,8 @@ const systemManageApiMap = {
   application: applicationResourceApi,
   applicationKey: applicationKeyResourceApi,
   workflowVersion: workflowVersionResourceApi,
-  chatLog: chatLogWResourceApi,
+  chatLog: chatLogResourceApi,
+  resourceAuthorization: resourceAuthorizationResourceApi,
 } as any
 
 const data = {
diff --git a/ui/src/views/application-overview/xpack-component/XPackDisplaySettingDialog.vue b/ui/src/views/application-overview/xpack-component/XPackDisplaySettingDialog.vue
index d464a0d71..07a67a21b 100644
--- a/ui/src/views/application-overview/xpack-component/XPackDisplaySettingDialog.vue
+++ b/ui/src/views/application-overview/xpack-component/XPackDisplaySettingDialog.vue
@@ -544,7 +544,7 @@ const xpackForm = ref<any>({
   language: '',
   icon: '',
   icon_url: '',
-  show_history: false,
+  show_history: true,
   draggable: false,
   show_guide: false,
   chat_background: '',
diff --git a/ui/src/views/chat-log/index.vue b/ui/src/views/chat-log/index.vue
index bf97d0192..3a1d84705 100644
--- a/ui/src/views/chat-log/index.vue
+++ b/ui/src/views/chat-log/index.vue
@@ -3,49 +3,52 @@
     <h2 class="mb-16">{{ $t('views.chatLog.title') }}</h2>
 
     <el-card style="--el-card-padding: 24px">
-      <div class="mb-16">
-        <el-select
-          v-model="query_option"
-          class="mr-12"
-          @change="search_type_change"
-          style="width: 75px"
-        >
-          <el-option :label="$t('views.chatLog.table.abstract')" value="abstract" />
-          <el-option :label="$t('views.chatLog.table.username')" value="username" />
-        </el-select>
-        <el-input
-          v-model="search"
-          @change="getList"
-          :placeholder="$t('common.search')"
-          prefix-icon="Search"
-          class="w-240 mr-12"
-          clearable
-        />
-        <el-select
-          v-model="history_day"
-          class="mr-12"
-          @change="changeDayHandle"
-          style="width: 180px"
-        >
-          <el-option
-            v-for="item in dayOptions"
-            :key="item.value"
-            :label="item.label"
-            :value="item.value"
+      <div class="mb-16 flex-between">
+        <div class="flex align-center">
+          <div class="flex-between complex-search">
+            <el-select
+              v-model="search_type"
+              class="complex-search__left"
+              @change="search_type_change"
+              style="width: 75px"
+            >
+              <el-option :label="$t('views.chatLog.table.abstract')" value="abstract" />
+              <el-option :label="$t('views.chatLog.table.username')" value="username" />
+            </el-select>
+            <el-input
+              v-model="search_form[search_type]"
+              @change="getList"
+              :placeholder="$t('common.search')"
+              class="w-240"
+              clearable
+            />
+          </div>
+          <el-select
+            v-model="history_day"
+            class="ml-12"
+            @change="changeDayHandle"
+            style="width: 180px"
+          >
+            <el-option
+              v-for="item in dayOptions"
+              :key="item.value"
+              :label="item.label"
+              :value="item.value"
+            />
+          </el-select>
+          <el-date-picker
+            v-if="history_day === 'other'"
+            v-model="daterangeValue"
+            type="daterange"
+            :start-placeholder="$t('views.applicationOverview.monitor.startDatePlaceholder')"
+            :end-placeholder="$t('views.applicationOverview.monitor.endDatePlaceholder')"
+            format="YYYY-MM-DD"
+            value-format="YYYY-MM-DD"
+            @change="changeDayRangeHandle"
+            style="width: 240px"
+            class="mr-12"
           />
-        </el-select>
-        <el-date-picker
-          v-if="history_day === 'other'"
-          v-model="daterangeValue"
-          type="daterange"
-          :start-placeholder="$t('views.applicationOverview.monitor.startDatePlaceholder')"
-          :end-placeholder="$t('views.applicationOverview.monitor.endDatePlaceholder')"
-          format="YYYY-MM-DD"
-          value-format="YYYY-MM-DD"
-          @change="changeDayRangeHandle"
-          style="width: 240px"
-          class="mr-12"
-        />
+        </div>
         <div style="display: flex; align-items: center" class="float-right">
           <el-button @click="dialogVisible = true" v-if="permissionPrecise.chat_log_clear(id)">
             {{ $t('views.chatLog.buttons.clearStrategy') }}
@@ -218,7 +221,11 @@
       :close-on-click-modal="false"
       :close-on-press-escape="false"
     >
-      <SelectKnowledgeDocument ref="SelectKnowledgeDocumentRef" :apiType="apiType" :workspace-id="detail.workspace_id"/>
+      <SelectKnowledgeDocument
+        ref="SelectKnowledgeDocumentRef"
+        :apiType="apiType"
+        :workspace-id="detail.workspace_id"
+      />
       <template #footer>
         <span class="dialog-footer">
           <el-button @click.prevent="documentDialogVisible = false">
@@ -263,15 +270,15 @@ const {
 } = route as any
 
 const emit = defineEmits(['refresh'])
-const formRef = ref()
 
+const search_type = ref('abstract')
 const search_form = ref<any>({
   abstract: '',
-    username: '',
+  username: '',
 })
 
 const search_type_change = () => {
-  search_form.value = {abstract: '', username: ''}
+  search_form.value = { abstract: '', username: '' }
 }
 
 const dayOptions = [
@@ -326,9 +333,7 @@ const tableIndexMap = computed<Dict<number>>(() => {
     .reduce((pre, next) => ({ ...pre, ...next }), {})
 })
 const history_day = ref<number | string>(7)
-const query_option = ref<string>('abstract')
 
-const search = ref('')
 const detail = ref<any>(null)
 
 const currentChatId = ref<string>('')
@@ -429,14 +434,13 @@ const handleSelectionChange = (val: any[]) => {
 }
 
 function getList() {
-  let obj: any = {
+  const obj: any = {
     start_time: daterange.value.start_time,
     end_time: daterange.value.end_time,
     ...filter.value,
   }
-  if (search.value) {
-    if (query_option.value === 'abstract'){obj = { ...obj, abstract: search.value }}
-    else if (query_option.value === 'username'){obj = { ...obj, username: search.value }} 
+  if (search_form.value[search_type.value]) {
+    obj[search_type.value] = search_form.value[search_type.value]
   }
   return loadSharedApi({ type: 'chatLog', systemType: apiType.value })
     .getChatLog(id as string, paginationConfig, obj, loading)
@@ -466,15 +470,14 @@ const exportLog = () => {
     }
   })
   if (detail.value) {
-    let obj: any = {
+    const obj: any = {
       start_time: daterange.value.start_time,
       end_time: daterange.value.end_time,
       ...filter.value,
     }
-    if (search.value) {
-      obj = { ...obj, abstract: search.value }
+    if (search_form.value[search_type.value]) {
+      obj[search_type.value] = search_form.value[search_type.value]
     }
-
     loadSharedApi({ type: 'chatLog', systemType: apiType.value }).postExportChatLog(
       detail.value.id,
       detail.value.name,
diff --git a/ui/src/views/chat/component/HistoryPanel.vue b/ui/src/views/chat/component/HistoryPanel.vue
index 471239c38..f12c6bd1a 100644
--- a/ui/src/views/chat/component/HistoryPanel.vue
+++ b/ui/src/views/chat/component/HistoryPanel.vue
@@ -40,7 +40,7 @@
         <div
           v-show="!isPcCollapse"
           class="flex-between p-8 pb-0 color-secondary mt-8"
-          v-if="applicationDetail.show_history || hasPermission(EditionConst.IS_CE, 'OR')"
+          v-if="applicationDetail.show_history || user.isCE()"
         >
           <span>{{ $t('chat.history') }}</span>
           <el-tooltip effect="dark" :content="$t('chat.clearChat')" placement="right">
@@ -53,7 +53,7 @@
       <div
         v-show="!isPcCollapse"
         class="left-height"
-        v-if="applicationDetail.show_history || hasPermission(EditionConst.IS_CE, 'OR')"
+        v-if="applicationDetail.show_history || user.isCE()"
       >
         <el-scrollbar>
           <div class="p-16 pt-0">
@@ -111,7 +111,7 @@
         <template #title>{{ $t('chat.createChat') }}</template>
       </el-menu-item>
 
-      <el-sub-menu v-show="isPcCollapse" index="2" v-if="applicationDetail.show_history || hasPermission(EditionConst.IS_CE, 'OR')">
+      <el-sub-menu v-show="isPcCollapse" index="2" v-if="applicationDetail.show_history || user.isCE()">
         <template #title>
           <AppIcon iconName="app-history-outlined" />
         </template>
@@ -171,8 +171,9 @@
 import { ref } from 'vue'
 import { isAppIcon } from '@/utils/common'
 import EditTitleDialog from './EditTitleDialog.vue'
-import { EditionConst } from '@/utils/permission/data'
-import { hasPermission } from '@/utils/permission/index'
+import useStore from "@/stores";
+
+const {user} = useStore()
 const props = defineProps<{
   applicationDetail: any
   chatLogData: any[]
diff --git a/ui/src/views/document/UploadDocument.vue b/ui/src/views/document/UploadDocument.vue
index 5c0b310f3..8efacd12c 100644
--- a/ui/src/views/document/UploadDocument.vue
+++ b/ui/src/views/document/UploadDocument.vue
@@ -184,7 +184,6 @@ function back() {
   if (documentsFiles.value?.length > 0) {
     MsgConfirm(t('common.tip'), t('views.document.tip.saveMessage'), {
       confirmButtonText: t('common.confirm'),
-      type: 'warning',
     })
       .then(() => {
         router.go(-1)
diff --git a/ui/src/views/system-resource-management/ApplicationResourceIndex.vue b/ui/src/views/system-resource-management/ApplicationResourceIndex.vue
index c9fdecf91..6f2431008 100644
--- a/ui/src/views/system-resource-management/ApplicationResourceIndex.vue
+++ b/ui/src/views/system-resource-management/ApplicationResourceIndex.vue
@@ -260,6 +260,16 @@
               </el-button>
               <template #dropdown>
                 <el-dropdown-menu>
+                  <el-dropdown-item
+                    @click.stop="openAuthorization(row)"
+                    v-if="permissionPrecise.auth()"
+                  >
+                    <AppIcon
+                      iconName="app-resource-authorization"
+                      class="color-secondary"
+                    ></AppIcon>
+                    {{ $t('views.system.resourceAuthorization.title') }}
+                  </el-dropdown-item>
                   <el-dropdown-item
                     @click.stop="exportApplication(row)"
                     v-if="permissionPrecise.export()"
@@ -281,6 +291,10 @@
         </el-table-column>
       </app-table>
     </el-card>
+    <ResourceAuthorizationDrawer
+      :type="SourceTypeEnum.APPLICATION"
+      ref="ResourceAuthorizationDrawerRef"
+    />
   </div>
 </template>
 
@@ -288,6 +302,7 @@
 import { onMounted, ref, reactive, computed, watch } from 'vue'
 import { useRouter, useRoute } from 'vue-router'
 import ApplicationResourceApi from '@/api/system-resource-management/application'
+import ResourceAuthorizationDrawer from '@/components/resource-authorization-drawer/index.vue'
 import { t } from '@/locales'
 import { isAppIcon, resetUrl } from '@/utils/common'
 import useStore from '@/stores'
@@ -297,7 +312,7 @@ import { isWorkFlow } from '@/utils/application.ts'
 import UserApi from '@/api/user/user.ts'
 import permissionMap from '@/permission'
 import { MsgSuccess, MsgConfirm, MsgError } from '@/utils/message'
-
+import { SourceTypeEnum } from '@/enums/common'
 const router = useRouter()
 const route = useRoute()
 const { user, application } = useStore()
@@ -317,7 +332,16 @@ const managePermission = () => {
 }
 
 const MoreFilledPermission = () => {
-  return permissionPrecise.value.export() || permissionPrecise.value.delete()
+  return (
+    permissionPrecise.value.export() ||
+    permissionPrecise.value.delete() ||
+    permissionPrecise.value.auth()
+  )
+}
+
+const ResourceAuthorizationDrawerRef = ref()
+function openAuthorization(item: any) {
+  ResourceAuthorizationDrawerRef.value.open(item.id)
 }
 
 const apiInputParams = ref([])
diff --git a/ui/src/views/system-resource-management/KnowledgeResourceIndex.vue b/ui/src/views/system-resource-management/KnowledgeResourceIndex.vue
index 7b9dedfc6..680b80f90 100644
--- a/ui/src/views/system-resource-management/KnowledgeResourceIndex.vue
+++ b/ui/src/views/system-resource-management/KnowledgeResourceIndex.vue
@@ -217,6 +217,16 @@
                     <AppIcon iconName="app-setting" class="color-secondary"></AppIcon>
                     {{ $t('common.setting') }}
                   </el-dropdown-item>
+                  <el-dropdown-item
+                    @click.stop="openAuthorization(row)"
+                    v-if="permissionPrecise.auth()"
+                  >
+                    <AppIcon
+                      iconName="app-resource-authorization"
+                      class="color-secondary"
+                    ></AppIcon>
+                    {{ $t('views.system.resourceAuthorization.title') }}
+                  </el-dropdown-item>
                   <el-dropdown-item
                     @click.stop="exportKnowledge(row)"
                     v-if="permissionPrecise.export()"
@@ -248,6 +258,10 @@
     </el-card>
     <SyncWebDialog ref="SyncWebDialogRef" />
     <GenerateRelatedDialog ref="GenerateRelatedDialogRef" apiType="systemManage" />
+    <ResourceAuthorizationDrawer
+      :type="SourceTypeEnum.KNOWLEDGE"
+      ref="ResourceAuthorizationDrawerRef"
+    />
   </div>
 </template>
 
@@ -258,10 +272,12 @@ import KnowledgeResourceApi from '@/api/system-resource-management/knowledge'
 import UserApi from '@/api/user/user'
 import SyncWebDialog from '@/views/knowledge/component/SyncWebDialog.vue'
 import GenerateRelatedDialog from '@/components/generate-related-dialog/index.vue'
+import ResourceAuthorizationDrawer from '@/components/resource-authorization-drawer/index.vue'
 import { datetimeFormat } from '@/utils/time'
 import { loadPermissionApi } from '@/utils/dynamics-api/permission-api.ts'
 import permissionMap from '@/permission'
 import { MsgSuccess, MsgConfirm } from '@/utils/message'
+import { SourceTypeEnum } from '@/enums/common'
 import { t } from '@/locales'
 import useStore from '@/stores'
 const router = useRouter()
@@ -287,7 +303,8 @@ const MoreFilledPermission = () => {
     permissionPrecise.value.generate() ||
     permissionPrecise.value.edit() ||
     permissionPrecise.value.export() ||
-    permissionPrecise.value.delete()
+    permissionPrecise.value.delete() ||
+    permissionPrecise.value.auth()
   )
 }
 
@@ -306,6 +323,11 @@ const paginationConfig = reactive({
   total: 0,
 })
 
+const ResourceAuthorizationDrawerRef = ref()
+function openAuthorization(item: any) {
+  ResourceAuthorizationDrawerRef.value.open(item.id)
+}
+
 const exportKnowledge = (item: any) => {
   KnowledgeResourceApi.exportKnowledge(item.name, item.id, loading).then(() => {
     MsgSuccess(t('common.exportSuccess'))
diff --git a/ui/src/views/system-resource-management/ModelResourceIndex.vue b/ui/src/views/system-resource-management/ModelResourceIndex.vue
index a62fe0b3c..89907166b 100644
--- a/ui/src/views/system-resource-management/ModelResourceIndex.vue
+++ b/ui/src/views/system-resource-management/ModelResourceIndex.vue
@@ -196,50 +196,61 @@
             </el-tooltip>
             <el-tooltip
               effect="dark"
-              :content="$t('views.model.modelForm.title.paramSetting')"
+              :content="$t('views.system.resourceAuthorization.title')"
               placement="top"
-              v-if="
-                (row.model_type === 'TTS' ||
-                  row.model_type === 'LLM' ||
-                  row.model_type === 'IMAGE' ||
-                  row.model_type === 'TTI') &&
-                permissionPrecise.paramSetting()
-              "
+              v-if="permissionPrecise.auth()"
             >
               <span class="mr-8">
                 <el-button
                   type="primary"
                   text
-                  :title="$t('views.model.modelForm.title.paramSetting')"
-                  @click.stop="openParamSetting(row)"
+                  :title="$t('views.system.resourceAuthorization.title')"
+                  @click.stop="openAuthorization(row)"
                 >
-                  <AppIcon iconName="app-setting"></AppIcon>
-                </el-button>
-              </span>
-            </el-tooltip>
-            <el-tooltip
-              effect="dark"
-              :content="$t('common.delete')"
-              placement="top"
-              v-if="permissionPrecise.delete()"
-            >
-              <span class="mr-8">
-                <el-button
-                  type="primary"
-                  text
-                  :title="$t('common.delete')"
-                  @click.stop="deleteModel(row)"
-                >
-                  <AppIcon iconName="app-delete"></AppIcon>
+                  <AppIcon iconName="app-resource-authorization"></AppIcon>
                 </el-button>
               </span>
             </el-tooltip>
+
+            <el-dropdown trigger="click" v-if="MoreFilledPermission()">
+              <el-button text @click.stop type="primary">
+                <AppIcon iconName="app-more"></AppIcon>
+              </el-button>
+              <template #dropdown>
+                <el-dropdown-menu>
+                  <el-dropdown-item
+                    @click.stop="openAuthorization(row)"
+                    v-if="
+                      (row.model_type === 'TTS' ||
+                        row.model_type === 'LLM' ||
+                        row.model_type === 'IMAGE' ||
+                        row.model_type === 'TTI') &&
+                      permissionPrecise.paramSetting()
+                    "
+                  >
+                    <AppIcon iconName="app-setting" class="color-secondary"></AppIcon>
+                    {{ $t('views.model.modelForm.title.paramSetting') }}
+                  </el-dropdown-item>
+                  <el-dropdown-item
+                    @click.stop="deleteModel(row)"
+                    v-if="permissionPrecise.delete()"
+                  >
+                    <AppIcon iconName="app-delete" class="color-secondary"></AppIcon>
+                    {{ $t('common.delete') }}
+                  </el-dropdown-item>
+                </el-dropdown-menu>
+              </template>
+            </el-dropdown>
           </template>
         </el-table-column>
       </app-table>
     </el-card>
     <EditModel ref="editModelRef" @submit="getList"></EditModel>
     <ParamSettingDialog ref="paramSettingRef" />
+    <ResourceAuthorizationDrawer
+      :type="SourceTypeEnum.MODEL"
+      ref="ResourceAuthorizationDrawerRef"
+    />
   </div>
 </template>
 
@@ -249,6 +260,8 @@ import type { Provider, Model } from '@/api/type/model'
 import EditModel from '@/views/model/component/EditModel.vue'
 import ParamSettingDialog from '@/views/model/component/ParamSettingDialog.vue'
 import ModelResourceApi from '@/api/system-resource-management/model'
+import ResourceAuthorizationDrawer from '@/components/resource-authorization-drawer/index.vue'
+import { SourceTypeEnum } from '@/enums/common'
 import { modelTypeList } from '@/views/model/component/data'
 import { modelType } from '@/enums/model'
 import { t } from '@/locales'
@@ -283,6 +296,16 @@ const paginationConfig = reactive({
   total: 0,
 })
 
+// sync generete edit export delete
+const MoreFilledPermission = () => {
+  return permissionPrecise.value.delete() || permissionPrecise.value.auth()
+}
+
+const ResourceAuthorizationDrawerRef = ref()
+function openAuthorization(item: any) {
+  ResourceAuthorizationDrawerRef.value.open(item.id)
+}
+
 const deleteModel = (row: any) => {
   MsgConfirm(
     `${t('views.model.delete.confirmTitle')}${row.name} ?`,
diff --git a/ui/src/views/system-resource-management/ToolResourceIndex.vue b/ui/src/views/system-resource-management/ToolResourceIndex.vue
index 7084a234c..531657c9f 100644
--- a/ui/src/views/system-resource-management/ToolResourceIndex.vue
+++ b/ui/src/views/system-resource-management/ToolResourceIndex.vue
@@ -270,16 +270,26 @@
                   </el-dropdown-item>
 
                   <el-dropdown-item
-                    v-if="!row.template_id && row.tool_type === 'CUSTOM' && permissionPrecise.export()"
+                    @click.stop="openAuthorization(row)"
+                    v-if="permissionPrecise.auth()"
+                  >
+                    <AppIcon
+                      iconName="app-resource-authorization"
+                      class="color-secondary"
+                    ></AppIcon>
+                    {{ $t('views.system.resourceAuthorization.title') }}
+                  </el-dropdown-item>
+
+                  <el-dropdown-item
+                    v-if="
+                      !row.template_id && row.tool_type === 'CUSTOM' && permissionPrecise.export()
+                    "
                     @click.stop="exportTool(row)"
                   >
                     <AppIcon iconName="app-export" class="color-secondary"></AppIcon>
                     {{ $t('common.export') }}
                   </el-dropdown-item>
-                  <el-dropdown-item
-                    v-if="row.tool_type === 'MCP'"
-                    @click.stop="showMcpConfig(row)"
-                  >
+                  <el-dropdown-item v-if="row.tool_type === 'MCP'" @click.stop="showMcpConfig(row)">
                     <AppIcon iconName="app-operate-log" class="color-secondary"></AppIcon>
                     {{ $t('views.tool.mcpConfig') }}
                   </el-dropdown-item>
@@ -304,6 +314,7 @@
     <McpToolFormDrawer ref="McpToolFormDrawerRef" @refresh="refresh" :title="McpToolDrawertitle" />
     <AddInternalToolDialog ref="AddInternalToolDialogRef" @refresh="confirmAddInternalTool" />
     <McpToolConfigDialog ref="McpToolConfigDialogRef" @refresh="refresh" />
+    <ResourceAuthorizationDrawer :type="SourceTypeEnum.TOOL" ref="ResourceAuthorizationDrawerRef" />
   </div>
 </template>
 
@@ -314,8 +325,10 @@ import InitParamDrawer from '@/views/tool/component/InitParamDrawer.vue'
 import ToolResourceApi from '@/api/system-resource-management/tool'
 import AddInternalToolDialog from '@/views/tool/toolStore/AddInternalToolDialog.vue'
 import ToolFormDrawer from '@/views/tool/ToolFormDrawer.vue'
-import McpToolFormDrawer from "@/views/tool/McpToolFormDrawer.vue";
+import McpToolFormDrawer from '@/views/tool/McpToolFormDrawer.vue'
+import ResourceAuthorizationDrawer from '@/components/resource-authorization-drawer/index.vue'
 import { t } from '@/locales'
+import { SourceTypeEnum } from '@/enums/common'
 import { resetUrl } from '@/utils/common'
 import { ToolType } from '@/enums/tool'
 import useStore from '@/stores'
@@ -324,7 +337,7 @@ import { loadPermissionApi } from '@/utils/dynamics-api/permission-api.ts'
 import UserApi from '@/api/user/user.ts'
 import { MsgSuccess, MsgConfirm, MsgError } from '@/utils/message'
 import permissionMap from '@/permission'
-import McpToolConfigDialog from "@/views/tool/component/McpToolConfigDialog.vue";
+import McpToolConfigDialog from '@/views/tool/component/McpToolConfigDialog.vue'
 
 const { user } = useStore()
 
@@ -355,10 +368,16 @@ const MoreFilledPermission = (row: any) => {
   return (
     permissionPrecise.value.export() ||
     permissionPrecise.value.delete() ||
+    permissionPrecise.value.auth() ||
     (row.init_field_list?.length > 0 && permissionPrecise.value.edit())
   )
 }
 
+const ResourceAuthorizationDrawerRef = ref()
+function openAuthorization(item: any) {
+  ResourceAuthorizationDrawerRef.value.open(item.id)
+}
+
 function exportTool(row: any) {
   ToolResourceApi.exportTool(row.id, row.name, loading).catch((e: any) => {
     if (e.response.status !== 403) {
@@ -371,11 +390,9 @@ function exportTool(row: any) {
 
 const McpToolConfigDialogRef = ref()
 function showMcpConfig(item: any) {
-  ToolResourceApi
-    .getToolById(item?.id, loading)
-    .then((res: any) => {
-      McpToolConfigDialogRef.value.open(res.data)
-    })
+  ToolResourceApi.getToolById(item?.id, loading).then((res: any) => {
+    McpToolConfigDialogRef.value.open(res.data)
+  })
 }
 
 function deleteTool(row: any) {
@@ -433,7 +450,6 @@ function openCreateDialog(data?: any) {
   }
 }
 
-
 function openCreateMcpDialog(data?: any) {
   // 有template_id的不允许编辑，是模板转换来的
   if (data?.template_id) {
diff --git a/ui/src/views/tool/McpToolFormDrawer.vue b/ui/src/views/tool/McpToolFormDrawer.vue
index 8fc593619..272988e2c 100644
--- a/ui/src/views/tool/McpToolFormDrawer.vue
+++ b/ui/src/views/tool/McpToolFormDrawer.vue
@@ -216,7 +216,6 @@ function close() {
   } else {
     MsgConfirm(t('common.tip'), t('views.tool.tip.saveMessage'), {
       confirmButtonText: t('common.confirm'),
-      type: 'warning',
     })
       .then(() => {
         visible.value = false
diff --git a/ui/src/views/tool/ToolFormDrawer.vue b/ui/src/views/tool/ToolFormDrawer.vue
index 988e3950d..bb3427bc2 100644
--- a/ui/src/views/tool/ToolFormDrawer.vue
+++ b/ui/src/views/tool/ToolFormDrawer.vue
@@ -344,7 +344,6 @@ function close() {
   } else {
     MsgConfirm(t('common.tip'), t('views.tool.tip.saveMessage'), {
       confirmButtonText: t('common.confirm'),
-      type: 'warning',
     })
       .then(() => {
         visible.value = false
diff --git a/ui/src/workflow/nodes/ai-chat-node/index.vue b/ui/src/workflow/nodes/ai-chat-node/index.vue
index 14c7fd168..4cbeefca4 100644
--- a/ui/src/workflow/nodes/ai-chat-node/index.vue
+++ b/ui/src/workflow/nodes/ai-chat-node/index.vue
@@ -124,6 +124,7 @@
               link
               @click="openMcpServersDialog"
               @refreshForm="refreshParam"
+              v-if="chat_data.mcp_enable"
             >
               <AppIcon iconName="app-setting"></AppIcon>
             </el-button>
@@ -165,6 +166,7 @@
               link
               @click="openToolDialog"
               @refreshForm="refreshParam"
+              v-if="chat_data.tool_enable"
             >
               <AppIcon iconName="app-setting"></AppIcon>
             </el-button>
@@ -201,6 +203,7 @@
                   @click="openReasoningParamSettingDialog"
                   @refreshForm="refreshParam"
                   class="mr-4"
+                  v-if="chat_data.model_setting.reasoning_content_enable"
                 >
                   <AppIcon iconName="app-setting"></AppIcon>
                 </el-button>