15308555518/ MaxKB
1
0
Fork 0
mirror of https://github.com/1Panel-dev/MaxKB.git synced 2025-12-30 09:42:48 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

fix: The user folder granted to the regular user role has role-based permissions, and regular users cannot view this folder.

This commit is contained in:
zhangzhanwei 2025-12-30 11:54:02 +08:00 committed by zhanweizhang7
parent 36bbacf518
commit ab6064eff1
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
apps/folders/serializers/folder.py
View File

@ -308,9 +308,10 @@ class FolderTreeSerializer(serializers.Serializer):
is_x_pack_ee = workspace_user_role_mapping_model is not None and role_permission_mapping_model is not None
if is_x_pack_ee:
return QuerySet(workspace_user_role_mapping_model).select_related('role', 'user').filter(
workspace_id=workspace_id, user_id=user_id,
Q(role__rolepermission__permission_id=f"{source}_FOLDER:READ") | Q(role__internal=True),
workspace_id=workspace_id,
user_id=user_id,
role__type=RoleConstants.USER.value.__str__(),
role__rolepermission__permission_id=f"{source}_FOLDER:READ"
).exists()
return False