mirror of
https://github.com/infiniflow/ragflow.git
synced 2025-12-08 20:42:30 +08:00
cf09c2260a
### What problem does this PR solve? - Add comprehensive RBAC support with role and permission management - Implement CREATE/ALTER/DROP ROLE commands for role lifecycle management - Add GRANT/REVOKE commands for fine-grained permission control - Support user role assignment via ALTER USER SET ROLE command - Add SHOW ROLE and SHOW USER PERMISSION for permission inspection - Implement corresponding RESTful API endpoints for role management - Integrate role commands into existing command execution framework ### Type of change - [x] New Feature (non-breaking change which adds functionality) --------- Signed-off-by: Jin Hai <haijin.chn@gmail.com>
77 lines
2.8 KiB
Python
77 lines
2.8 KiB
Python
#
|
|
# Copyright 2025 The InfiniFlow Authors. All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
import logging
|
|
|
|
from typing import Dict, Any
|
|
|
|
from api.common.exceptions import AdminException
|
|
|
|
|
|
class RoleMgr:
|
|
@staticmethod
|
|
def create_role(role_name: str, description: str):
|
|
error_msg = f"not implement: create role: {role_name}, description: {description}"
|
|
logging.error(error_msg)
|
|
raise AdminException(error_msg)
|
|
|
|
@staticmethod
|
|
def update_role_description(role_name: str, description: str) -> Dict[str, Any]:
|
|
error_msg = f"not implement: update role: {role_name} with description: {description}"
|
|
logging.error(error_msg)
|
|
raise AdminException(error_msg)
|
|
|
|
@staticmethod
|
|
def delete_role(role_name: str) -> Dict[str, Any]:
|
|
error_msg = f"not implement: drop role: {role_name}"
|
|
logging.error(error_msg)
|
|
raise AdminException(error_msg)
|
|
|
|
@staticmethod
|
|
def list_roles() -> Dict[str, Any]:
|
|
error_msg = "not implement: list roles"
|
|
logging.error(error_msg)
|
|
raise AdminException(error_msg)
|
|
|
|
@staticmethod
|
|
def get_role_permission(role_name: str) -> Dict[str, Any]:
|
|
error_msg = f"not implement: show role {role_name}"
|
|
logging.error(error_msg)
|
|
raise AdminException(error_msg)
|
|
|
|
@staticmethod
|
|
def grant_role_permission(role_name: str, actions: list, resource: str) -> Dict[str, Any]:
|
|
error_msg = f"not implement: grant role {role_name} actions: {actions} on {resource}"
|
|
logging.error(error_msg)
|
|
raise AdminException(error_msg)
|
|
|
|
@staticmethod
|
|
def revoke_role_permission(role_name: str, actions: list, resource: str) -> Dict[str, Any]:
|
|
error_msg = f"not implement: revoke role {role_name} actions: {actions} on {resource}"
|
|
logging.error(error_msg)
|
|
raise AdminException(error_msg)
|
|
|
|
@staticmethod
|
|
def update_user_role(user_name: str, role_name: str) -> Dict[str, Any]:
|
|
error_msg = f"not implement: update user role: {user_name} to role {role_name}"
|
|
logging.error(error_msg)
|
|
raise AdminException(error_msg)
|
|
|
|
@staticmethod
|
|
def get_user_permission(user_name: str) -> Dict[str, Any]:
|
|
error_msg = f"not implement: get user permission: {user_name}"
|
|
logging.error(error_msg)
|
|
raise AdminException(error_msg)
|