YG-Soft/X-Financial
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(agent-assets): allow admin access to platform rules

Browse Source
This commit is contained in:
caoxiaozhu
2026-07-20 10:30:22 +08:00
parent 74fafc86d3
commit 140efd1a2a
4 changed files with 92 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
server/src/app/services/agent_asset_access.py
View File

@@ -33,11 +33,19 @@ class AgentAssetAccessScope:
@classmethod
def from_user(cls, current_user: CurrentUserContext) -> AgentAssetAccessScope:
tenant_id = str(current_user.tenant_id or "").strip()
if not tenant_id or tenant_id == AGENT_ASSET_PLATFORM_TENANT_ID:
is_platform_admin = bool(current_user.is_admin)
if not tenant_id or (
tenant_id == AGENT_ASSET_PLATFORM_TENANT_ID and not is_platform_admin
):
raise PermissionError("当前登录会话缺少有效租户。")
return cls(tenant_id=tenant_id, is_platform_admin=bool(current_user.is_admin))
return cls(tenant_id=tenant_id, is_platform_admin=is_platform_admin)
def visibility_clause(self, model: Any) -> Any:
if self.tenant_id == AGENT_ASSET_PLATFORM_TENANT_ID:
return and_(
model.scope == AGENT_ASSET_PLATFORM_SCOPE,
model.tenant_id == AGENT_ASSET_PLATFORM_TENANT_ID,
)
return or_(
and_(
model.scope == AGENT_ASSET_PLATFORM_SCOPE,