fix: tighten rag permissions and area scope
This commit is contained in:
@@ -571,6 +571,7 @@ class RbacServiceImpl(IRbacService):
|
||||
}
|
||||
|
||||
_PERMISSION_PREFIXES_BY_PATH: dict[str, list[str]] = {
|
||||
"/chat-with-llm": ["rag:"],
|
||||
"/files": ["documents:"],
|
||||
"/files/upload": ["documents:upload:"],
|
||||
"/documents": ["documents:"],
|
||||
|
||||
Reference in New Issue
Block a user