AI/dify
1
0
Fork 0
mirror of https://git.mirrors.martin98.com/https://github.com/langgenius/dify.git synced 2025-08-12 12:49:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: file upload auth (#11774)

Browse Source
This commit is contained in:
Joe 2024-12-18 11:02:40 +08:00 committed by GitHub
parent 79d11ea709
commit 580297e290
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
api/controllers/console/files.py
View File

@ -1,6 +1,7 @@
from flask import request from flask import request
from flask_login import current_user from flask_login import current_user
from flask_restful import Resource, marshal_with from flask_restful import Resource, marshal_with
from werkzeug.exceptions import Forbidden
import services import services
from configs import dify_config from configs import dify_config
@ -58,6 +59,9 @@ class FileApi(Resource):
if not file.filename: if not file.filename:
raise FilenameNotExistsError raise FilenameNotExistsError
if source == "datasets" and not current_user.is_dataset_editor:
raise Forbidden()
if source not in ("datasets", None): if source not in ("datasets", None):
source = None source = None