diff --git a/apps/folders/views/folder.py b/apps/folders/views/folder.py index 78a021bdf..87d99e86c 100644 --- a/apps/folders/views/folder.py +++ b/apps/folders/views/folder.py @@ -65,7 +65,8 @@ class FolderView(APIView): @has_permissions( lambda r, kwargs: Permission(group=Group(kwargs.get('source')), operate=Operate.READ, resource_path=f"/WORKSPACE/{kwargs.get('workspace_id')}"), - RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role() + RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role(), + RoleConstants.ADMIN ) def get(self, request: Request, workspace_id: str, source: str): return result.success(FolderTreeSerializer( @@ -111,7 +112,8 @@ class FolderView(APIView): @has_permissions( lambda r, kwargs: Permission(group=Group(kwargs.get('source')), operate=Operate.READ, resource_path=f"/WORKSPACE/{kwargs.get('workspace_id')}"), - RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role() + RoleConstants.WORKSPACE_MANAGE.get_workspace_role(), RoleConstants.USER.get_workspace_role(), + RoleConstants.ADMIN ) def get(self, request: Request, workspace_id: str, source: str, folder_id: str): return result.success(FolderSerializer.Operate(