From deb73337503072c56200dabf550a45059f4acbac Mon Sep 17 00:00:00 2001
From: zhangzhanwei <zhanwei.zhang@fit2cloud.com>
Date: Mon, 25 Aug 2025 17:45:07 +0800
Subject: [PATCH] fix: Permission of chat_user
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

--bug=1060792 --user=张展玮 【资源授权】知识库-授权单个用户单个知识库的查看权限，用户登录后能看见“向量化”&对话用户页面页可以“授权” https://www.tapd.cn/62980211/s/1760904
---
 .../permission/application/system-manage.ts   |   2 +
 ui/src/permission/knowledge/system-manage.ts  |   2 +
 ui/src/permission/knowledge/system-share.ts   |   2 +
 .../permission/knowledge/workspace-share.ts   |   1 +
 ui/src/permission/knowledge/workspace.ts      |  10 ++
 ui/src/views/chat-user/index.vue              | 149 +++++-------------
 ui/src/views/document/index.vue               |   2 +-
 7 files changed, 58 insertions(+), 110 deletions(-)

diff --git a/ui/src/permission/application/system-manage.ts b/ui/src/permission/application/system-manage.ts
index 2369ea7e7..33bdfca62 100644
--- a/ui/src/permission/application/system-manage.ts
+++ b/ui/src/permission/application/system-manage.ts
@@ -133,6 +133,8 @@ const systemManage = {
           PermissionConst.RESOURCE_APPLICATION_CHAT_USER_READ
         ],'OR'
     ),
+    chat_user_edit: () =>false,
+
     chat_log_read: () => 
       hasPermission(
         [
diff --git a/ui/src/permission/knowledge/system-manage.ts b/ui/src/permission/knowledge/system-manage.ts
index 6f88abe38..f631ce9db 100644
--- a/ui/src/permission/knowledge/system-manage.ts
+++ b/ui/src/permission/knowledge/system-manage.ts
@@ -150,6 +150,8 @@ const systemManage = {
       PermissionConst.RESOURCE_KNOWLEDGE_PROBLEM_EDIT
     ],'OR'
     ),
+    chat_user_edit: () =>false,
+
   
   auth: () => false,
   folderCreate: () => false,
diff --git a/ui/src/permission/knowledge/system-share.ts b/ui/src/permission/knowledge/system-share.ts
index 655be62b3..c0fce012c 100644
--- a/ui/src/permission/knowledge/system-share.ts
+++ b/ui/src/permission/knowledge/system-share.ts
@@ -182,6 +182,8 @@ const share = {
       ],
       'OR'
     ),
+  chat_user_edit: () =>false,
+
   auth: () => false,
   folderCreate: () => false,
   folderEdit: () => false,
diff --git a/ui/src/permission/knowledge/workspace-share.ts b/ui/src/permission/knowledge/workspace-share.ts
index a7dc28dcf..d185c13c6 100644
--- a/ui/src/permission/knowledge/workspace-share.ts
+++ b/ui/src/permission/knowledge/workspace-share.ts
@@ -31,6 +31,7 @@ const workspaceShare = {
   problem_relate: () => false,
   problem_delete: () => false,
   problem_edit: () => false,
+  chat_user_edit: () =>false,
 
   folderCreate: () => false,
   folderEdit: () => false,
diff --git a/ui/src/permission/knowledge/workspace.ts b/ui/src/permission/knowledge/workspace.ts
index 5c42f8970..65f860e01 100644
--- a/ui/src/permission/knowledge/workspace.ts
+++ b/ui/src/permission/knowledge/workspace.ts
@@ -272,6 +272,16 @@ const workspace = {
       ],
       'OR',
     ),
+  chat_user_edit: (source_id:string) =>
+    hasPermission(
+      [
+        new ComplexPermission([RoleConst.USER],[PermissionConst.KNOWLEDGE.getKnowledgeWorkspaceResourcePermission(source_id)],[],'AND'),
+        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+        PermissionConst.KNOWLEDGE_CHAT_USER_EDIT.getKnowledgeWorkspaceResourcePermission(source_id),
+        PermissionConst.KNOWLEDGE_CHAT_USER_EDIT.getWorkspacePermissionWorkspaceManageRole,
+      ],
+      'OR',
+    ),
   hit_test: () => false,  
 }
 
diff --git a/ui/src/views/chat-user/index.vue b/ui/src/views/chat-user/index.vue
index 6bfa70835..9ae789655 100644
--- a/ui/src/views/chat-user/index.vue
+++ b/ui/src/views/chat-user/index.vue
@@ -15,21 +15,12 @@
         <div class="user-left border-r">
           <div class="p-24 pb-0">
             <h4 class="medium mb-12">{{ $t('views.chatUser.group.title') }}</h4>
-            <el-input
-              v-model="filterText"
-              :placeholder="$t('common.search')"
-              prefix-icon="Search"
-              clearable
-            />
+            <el-input v-model="filterText" :placeholder="$t('common.search')" prefix-icon="Search" clearable />
           </div>
           <div class="list-height-left">
             <el-scrollbar v-loading="loading">
               <div class="p-16">
-                <common-list
-                  :data="filterList"
-                  @click="clickUserGroup"
-                  :default-active="current?.id"
-                >
+                <common-list :data="filterList" @click="clickUserGroup" :default-active="current?.id">
                   <template #default="{ row }">
                     <span class="ellipsis-1" :title="row.name">{{ row.name }}</span>
                   </template>
@@ -57,21 +48,14 @@
               </span>
             </div>
 
-            <div
-              class="flex align-center"
-              v-if="
-                route.path.includes('share/')
-                  ? false
-                  : hasPermission(permissionObj[currentPermissionKey], 'OR')
-              "
-            >
+            <div class="flex align-center" v-if="
+              route.path.includes('share/')
+                ? false
+                : permissionObj[currentPermissionKey]
+            ">
               <div class="color-secondary mr-8">{{ $t('views.chatUser.autoAuthorization') }}</div>
-              <el-switch
-                size="small"
-                :model-value="current?.is_auth"
-                @click="changeAuth"
-                :loading="loading"
-              ></el-switch>
+              <el-switch size="small" :model-value="current?.is_auth" @click="changeAuth"
+                :loading="loading"></el-switch>
             </div>
           </div>
 
@@ -79,36 +63,15 @@
             <div class="flex complex-search">
               <el-select class="complex-search__left" v-model="searchType" style="width: 120px">
                 <el-option :label="$t('views.login.loginForm.username.label')" value="username" />
-                <el-option
-                  :label="$t('views.userManage.userForm.nick_name.label')"
-                  value="nick_name"
-                />
+                <el-option :label="$t('views.userManage.userForm.nick_name.label')" value="nick_name" />
                 <el-option :label="$t('views.userManage.source.label')" value="source" />
               </el-select>
-              <el-input
-                v-if="searchType === 'username'"
-                v-model="searchForm.username"
-                @change="getList"
-                :placeholder="$t('common.inputPlaceholder')"
-                style="width: 220px"
-                clearable
-              />
-              <el-input
-                v-else-if="searchType === 'nick_name'"
-                v-model="searchForm.nick_name"
-                @change="getList"
-                :placeholder="$t('common.inputPlaceholder')"
-                style="width: 220px"
-                clearable
-              />
-              <el-select
-                v-else-if="searchType === 'source'"
-                v-model="searchForm.source"
-                @change="getList"
-                :placeholder="$t('common.selectPlaceholder')"
-                style="width: 220px"
-                clearable
-              >
+              <el-input v-if="searchType === 'username'" v-model="searchForm.username" @change="getList"
+                :placeholder="$t('common.inputPlaceholder')" style="width: 220px" clearable />
+              <el-input v-else-if="searchType === 'nick_name'" v-model="searchForm.nick_name" @change="getList"
+                :placeholder="$t('common.inputPlaceholder')" style="width: 220px" clearable />
+              <el-select v-else-if="searchType === 'source'" v-model="searchForm.source" @change="getList"
+                :placeholder="$t('common.selectPlaceholder')" style="width: 220px" clearable>
                 <el-option :label="$t('views.userManage.source.local')" value="LOCAL" />
                 <el-option label="CAS" value="CAS" />
                 <el-option label="LDAP" value="LDAP" />
@@ -119,31 +82,18 @@
                 <el-option :label="$t('views.userManage.source.dingtalk')" value="dingtalk" />
               </el-select>
             </div>
-            <el-button
-              type="primary"
-              :disabled="current?.is_auth"
-              @click="handleSave"
-              v-if="
-                route.path.includes('share/')
-                  ? false
-                  : hasPermission(permissionObj[currentPermissionKey], 'OR')
-              "
-            >
+            <el-button type="primary" :disabled="current?.is_auth" @click="handleSave" v-if="
+              route.path.includes('share/')
+                ? false
+                : permissionObj[currentPermissionKey]
+            ">
               {{ t('common.save') }}
             </el-button>
           </div>
 
-          <app-table
-            :data="tableData"
-            :pagination-config="paginationConfig"
-            @sizeChange="handleSizeChange"
-            @changePage="getList"
-            :maxTableHeight="350"
-          >
-            <el-table-column
-              prop="nick_name"
-              :label="$t('views.userManage.userForm.nick_name.label')"
-            />
+          <app-table :data="tableData" :pagination-config="paginationConfig" @sizeChange="handleSizeChange"
+            @changePage="getList" :maxTableHeight="350">
+            <el-table-column prop="nick_name" :label="$t('views.userManage.userForm.nick_name.label')" />
             <el-table-column prop="username" :label="$t('views.login.loginForm.username.label')" />
             <el-table-column prop="source" :label="$t('views.userManage.source.label')">
               <template #default="{ row }">
@@ -164,21 +114,13 @@
             </el-table-column>
             <el-table-column :width="140" align="center">
               <template #header>
-                <el-checkbox
-                  :model-value="allChecked"
-                  :indeterminate="allIndeterminate"
-                  :disabled="current?.is_auth"
-                  @change="handleCheckAll"
-                  >{{ $t('views.chatUser.authorization') }}
+                <el-checkbox :model-value="allChecked" :indeterminate="allIndeterminate" :disabled="current?.is_auth"
+                  @change="handleCheckAll">{{ $t('views.chatUser.authorization') }}
                 </el-checkbox>
               </template>
               <template #default="{ row }">
-                <el-checkbox
-                  v-model="row.is_auth"
-                  :indeterminate="row.indeterminate"
-                  :disabled="current?.is_auth"
-                  @change="(value: boolean) => handleRowChange(value, row)"
-                />
+                <el-checkbox v-model="row.is_auth" :indeterminate="row.indeterminate" :disabled="current?.is_auth"
+                  @change="(value: boolean) => handleRowChange(value, row)" />
               </template>
             </el-table-column>
           </app-table>
@@ -200,6 +142,7 @@ import { ComplexPermission } from '@/utils/permission/type'
 import { RoleConst, PermissionConst } from '@/utils/permission/data'
 import { hasPermission } from '@/utils/permission/index'
 import { loadSharedApi } from '@/utils/dynamics-api/shared-api'
+import permissionMap from '@/permission'
 
 const route = useRoute()
 
@@ -208,36 +151,19 @@ const {
 } = route as any
 
 const permissionObj = ref<any>({
-  APPLICATION: new ComplexPermission(
-    [RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole, RoleConst.USER.getWorkspaceRole],
-    [
-      PermissionConst.APPLICATION_CHAT_USER_EDIT,
-      PermissionConst.APPLICATION_CHAT_USER_EDIT.getApplicationWorkspaceResourcePermission(id),
-    ],
-    [],
-    'OR',
-  ),
-  KNOWLEDGE: new ComplexPermission(
-    [RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole, RoleConst.USER.getWorkspaceRole],
-    [
-      PermissionConst.KNOWLEDGE_CHAT_USER_EDIT,
-      PermissionConst.KNOWLEDGE_CHAT_USER_EDIT.getKnowledgeWorkspaceResourcePermission(id),
-    ],
-    [],
-    'OR',
-  ),
-  RESOURCE_APPLICATION: [RoleConst.ADMIN, PermissionConst.RESOURCE_APPLICATION_CHAT_USER_EDIT],
-  RESOURCE_KNOWLEDGE: [RoleConst.ADMIN, PermissionConst.RESOURCE_KNOWLEDGE_CHAT_USER_EDIT],
-  SHAREDKNOWLEDGE: new ComplexPermission(
+  APPLICATION: permissionMap['application']['workspace'].application_chat_user_edit(id),
+  KNOWLEDGE: permissionMap['knowledge']['workspace'].chat_user_edit(id),
+  RESOURCE_APPLICATION: hasPermission([RoleConst.ADMIN, PermissionConst.RESOURCE_APPLICATION_CHAT_USER_EDIT], 'OR'),
+  RESOURCE_KNOWLEDGE: hasPermission([RoleConst.ADMIN, PermissionConst.RESOURCE_KNOWLEDGE_CHAT_USER_EDIT], 'OR'),
+  SHAREDKNOWLEDGE: hasPermission(new ComplexPermission(
     [RoleConst.ADMIN],
     [PermissionConst.SHARED_KNOWLEDGE_CHAT_USER_EDIT],
     [],
     'OR',
-  ),
+  ), 'OR')
 })
 
 const currentPermissionKey = computed(() => {
-  if (route.path.includes('shared')) return 'SHAREDKNOWLEDGE'
   if (route.path.includes('resource-management')) {
     if (route.meta?.resourceType === 'KNOWLEDGE') {
       return 'RESOURCE_KNOWLEDGE'
@@ -245,6 +171,11 @@ const currentPermissionKey = computed(() => {
       return 'RESOURCE_APPLICATION'
     }
   }
+  else if (route.path.includes('shared')) {return 'SHAREDKNOWLEDGE'}
+  else {
+    if (route.path.includes('knowledge/')) return 'KNOWLEDGE'
+    if (route.path.includes('application/')) return 'APPLICATION'
+  }
   return route.meta?.resourceType as string
 })
 
diff --git a/ui/src/views/document/index.vue b/ui/src/views/document/index.vue
index fa22e8324..f97ef36df 100644
--- a/ui/src/views/document/index.vue
+++ b/ui/src/views/document/index.vue
@@ -515,7 +515,7 @@
                     effect="dark"
                     :content="$t('views.knowledge.setting.vectorization')"
                     placement="top"
-                    v-else="permissionPrecise.vector(id)"
+                    v-if="permissionPrecise.vector(id)"
                   >
                     <span class="mr-4">
                       <el-button type="primary" text @click.stop="refreshDocument(row)">