From 9e42a0fac801c0854f65da03da61052ecc5a3309 Mon Sep 17 00:00:00 2001
From: wangdan-fit2cloud <dan.wang@fit2cloud.com>
Date: Thu, 22 Oct 2026 16:02:01 +0800
Subject: [PATCH] feat: authorize workspace

---
 ui/src/api/API_README.md                      |   8 +
 .../system/shared-resources/authorization.ts  |  16 ++
 ui/src/api/types/index.ts                     |   2 +
 ui/src/api/types/shared-authorization.ts      |  10 +
 .../business/workspace-dropdown/index.vue     |   2 +-
 .../mk-table-filter/TableFilterMultiple.vue   |  22 +-
 ui/src/styles/STYLE_README.md                 |   3 +
 ui/src/styles/app.scss                        |  19 ++
 ui/src/views/VIEW_README.md                   |   5 +-
 .../display-setting/DisplaySettingDialog.vue  | 209 ++++++++----------
 ui/src/views/login/index.vue                  |   1 +
 .../AuthorizedWorkspaceDialog.vue             | 151 +++++++++++++
 .../authorized-workspace-action/index.vue     |  27 +++
 .../shared-resources/knowledge/index.vue      |   8 +-
 .../system/shared-resources/model/index.vue   |  29 ++-
 .../system/shared-resources/tool/index.vue    |  22 +-
 16 files changed, 389 insertions(+), 145 deletions(-)
 create mode 100644 ui/src/api/admin/system/shared-resources/authorization.ts
 create mode 100644 ui/src/api/types/shared-authorization.ts
 create mode 100644 ui/src/views/system/shared-resources/authorized-workspace-action/AuthorizedWorkspaceDialog.vue
 create mode 100644 ui/src/views/system/shared-resources/authorized-workspace-action/index.vue

diff --git a/ui/src/api/API_README.md b/ui/src/api/API_README.md
index 2b7a1ca3945..5f3ab0a8b28 100644
--- a/ui/src/api/API_README.md
+++ b/ui/src/api/API_README.md
@@ -241,6 +241,14 @@ System 不传 Workspace 文件夹条件；System 共享不提供智能体选择
 将响应的 `tools` 与 `shared_tools` 合并为 `ToolItem[]`，用于包含已授权共享工具的选项查询；
 按工具类型筛选时使用 `tool_type`。`workspace/shared/tool.ts` 的 `getAllTool(query)` 仅查询共享工具。
 
+### System 共享资源工作空间授权
+
+`system/shared-resources/authorization.ts` 通过 GET、POST
+`/system/shared/<knowledge|model|tool>/<resourceId>/authorization` 查询和保存工作空间授权，
+沿用 v2 System 共享授权协议，依赖部署端提供对应接口。配置类型为 `SharedWorkspaceAuthorization`，
+包含 `authentication_type`（`WHITE_LIST`／`BLACK_LIST`）和 `workspace_id_list`；请求层直接解包配置。
+弹窗通过 System Workspace API 查询工作空间，不读取路由中的工作空间 ID。
+
 ### System 共享工具
 
 `system/shared-resources/tool/tool.ts` 使用 `/system/shared/tool`，维护分页、详情、创建、更新、删除、
diff --git a/ui/src/api/admin/system/shared-resources/authorization.ts b/ui/src/api/admin/system/shared-resources/authorization.ts
new file mode 100644
index 00000000000..886d8ee5aae
--- /dev/null
+++ b/ui/src/api/admin/system/shared-resources/authorization.ts
@@ -0,0 +1,16 @@
+import { get, post } from '../../core/request'
+import type { SharedResourceType, SharedWorkspaceAuthorization } from '@/api/types'
+
+const prefix = '/system/shared'
+
+/** 获取共享资源的工作空间授权配置。 */
+const getSharedAuthorization = (resourceType: SharedResourceType, resourceId: string) => {
+  return get<SharedWorkspaceAuthorization | null>(`${prefix}/${resourceType.toLowerCase()}/${resourceId}/authorization`)
+}
+
+/** 保存共享资源的工作空间授权配置。 */
+const postSharedAuthorization = (resourceType: SharedResourceType, resourceId: string, payload: SharedWorkspaceAuthorization) => {
+  return post<SharedWorkspaceAuthorization, boolean>(`${prefix}/${resourceType.toLowerCase()}/${resourceId}/authorization`, payload)
+}
+
+export default { getSharedAuthorization, postSharedAuthorization }
diff --git a/ui/src/api/types/index.ts b/ui/src/api/types/index.ts
index 01dffb04a9d..3f23361052d 100644
--- a/ui/src/api/types/index.ts
+++ b/ui/src/api/types/index.ts
@@ -36,3 +36,5 @@ export type * from './document'
 export type * from './paragraph'
 export type * from './termbase'
 export type * from './chat-log'
+
+export type * from './shared-authorization'
diff --git a/ui/src/api/types/shared-authorization.ts b/ui/src/api/types/shared-authorization.ts
new file mode 100644
index 00000000000..f979ae14bbe
--- /dev/null
+++ b/ui/src/api/types/shared-authorization.ts
@@ -0,0 +1,10 @@
+/** System 共享资源授权 API 与页面共用的业务类型。 */
+import type { RESOURCE_TYPE } from '@/api/enums'
+import type { ResourceType } from './resource-authorization'
+
+export type SharedResourceType = Exclude<ResourceType, typeof RESOURCE_TYPE.APPLICATION>
+
+export interface SharedWorkspaceAuthorization {
+  authentication_type: 'WHITE_LIST' | 'BLACK_LIST'
+  workspace_id_list: string[]
+}
diff --git a/ui/src/components/business/workspace-dropdown/index.vue b/ui/src/components/business/workspace-dropdown/index.vue
index e58ae3e1711..5db93ddb68f 100644
--- a/ui/src/components/business/workspace-dropdown/index.vue
+++ b/ui/src/components/business/workspace-dropdown/index.vue
@@ -27,7 +27,7 @@ const emit = defineEmits<{ select: [option: WorkspaceItem] }>()
     <template #default="{ text }">
       <!-- 切换工作空间 -->
       <el-button text class="flex-align-center max-w-50 gap-1 rounded-md px-2! py-[7px]! text-N900!">
-        <MkIcon name="icon_moments-categories_outlined" class="mr-1" />
+        <MkIcon name="icon_moments-categories_outlined" class="mr-1 shrink-0" />
         <span class="min-w-0 flex-1 truncate" :title="text">{{ text }}</span>
         <MkIcon :icon="CaretBottom" :size="14" class="ml-1 text-N600!" />
       </el-button>
diff --git a/ui/src/components/global/mk-table/mk-table-filter/TableFilterMultiple.vue b/ui/src/components/global/mk-table/mk-table-filter/TableFilterMultiple.vue
index 1e0251f58f0..af91af114eb 100644
--- a/ui/src/components/global/mk-table/mk-table-filter/TableFilterMultiple.vue
+++ b/ui/src/components/global/mk-table/mk-table-filter/TableFilterMultiple.vue
@@ -52,14 +52,8 @@ function handleConfirm() {
         <el-checkbox :indeterminate="selectionIndeterminate" :model-value="allSelected" class="mr-0!" @change="handleSelectAllChange">
           全部
         </el-checkbox>
-        <el-checkbox-group v-model="pendingValues" class="flex-column gap-2">
-          <el-checkbox
-            v-for="option in options"
-            :key="`${typeof option.value}:${option.value}`"
-            :value="option.value"
-            :disabled="option.disabled"
-            class="mk-table-filter__option mr-0! w-full min-w-0"
-          >
+        <el-checkbox-group v-model="pendingValues" class="mk-checkbox-group-vertical gap-2">
+          <el-checkbox v-for="option in options" :key="`${typeof option.value}:${option.value}`" :value="option.value" :disabled="option.disabled">
             <span class="block min-w-0 truncate" :title="option.label">{{ option.label }}</span>
           </el-checkbox>
         </el-checkbox-group>
@@ -68,19 +62,11 @@ function handleConfirm() {
 
     <div class="p-3 text-right">
       <!-- 清除多选筛选 -->
-      <el-button class="min-w-12! w-12!" size="small" @click="handleReset">重置</el-button>
+      <el-button plain class="min-w-12! w-12!" size="small" @click="handleReset">重置</el-button>
       <!-- 确认多选筛选 -->
       <el-button class="min-w-12! w-12!" size="small" type="primary" @click="handleConfirm">确定</el-button>
     </div>
   </el-popover>
 </template>
 
-<style scoped lang="scss">
-/* 多选选项 */
-.mk-table-filter__option {
-  :deep(.el-checkbox__label) {
-    min-width: 0;
-    overflow: hidden;
-  }
-}
-</style>
+<style scoped lang="scss"></style>
diff --git a/ui/src/styles/STYLE_README.md b/ui/src/styles/STYLE_README.md
index 71749261111..4eb2f0c6059 100644
--- a/ui/src/styles/STYLE_README.md
+++ b/ui/src/styles/STYLE_README.md
@@ -211,6 +211,9 @@ CSS 自定义属性同样按变量名排序。嵌套选择器、伪类和媒体
 
 ## 常用交互工具类
 
+纵向复选框组在 `el-checkbox-group` 上添加 `mk-checkbox-group-vertical`，由 `app.scss` 统一
+设置纵向排列、8px 间距、选项整行宽度及长标签省略；标签文本需提供原生 `title`。
+
 纵向单选组在 `el-radio-group` 上添加 `mk-radio-group-vertical`，统一整行宽度、8px 间距及
 多行选项的顶部对齐；普通单行和带描述的选项均可使用。
 
diff --git a/ui/src/styles/app.scss b/ui/src/styles/app.scss
index b3f22010e41..d24d581715b 100644
--- a/ui/src/styles/app.scss
+++ b/ui/src/styles/app.scss
@@ -124,6 +124,25 @@ h6 {
   z-index: 1;
 }
 
+/* checkbox */
+.mk-checkbox-group-vertical {
+  display: flex;
+  flex-direction: column;
+
+  .el-checkbox {
+    margin-right: 0;
+    min-width: 0;
+    width: 100%;
+  }
+
+  .el-checkbox__label {
+    min-width: 0;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+}
+
 /* dot */
 // 状态圆点
 .mk-dot-danger {
diff --git a/ui/src/views/VIEW_README.md b/ui/src/views/VIEW_README.md
index 1ed64b07342..c0ff09a2045 100644
--- a/ui/src/views/VIEW_README.md
+++ b/ui/src/views/VIEW_README.md
@@ -45,7 +45,7 @@
 | `knowledge-detail/library/document/`、`tags/`                                         | 文档及标签维护                               |
 | `knowledge-detail/library/image/`                                                     | 图片列表，复用文档操作                       |
 | `knowledge-detail/hit-test/`                                                          | 召回测试参数、文本／图片查询及结果展示       |
-| `knowledge-detail/problem/`                                                          | 问题查询、维护与分段关联                               |
+| `knowledge-detail/problem/`                                                           | 问题查询、维护与分段关联                     |
 | `knowledge-detail/termbase/`                                                          | 知识库自定义分词维护                         |
 | `knowledge-detail/chat-user/`、`external-retrieval/`                                  | 对话授权与外部检索配置                       |
 | `knowledge-detail/setting/base/`、`document-strategy/`、`scheduled-sync/`             | 基础设置、文档策略、定时同步与日志           |
@@ -96,6 +96,9 @@
 - System 模型／工具使用表格，保留既有权限、引用数量删除提示和末页回退；不新增不存在的创建／导入能力。
   工作空间列与选项仅企业版显示，筛选 `workspace_ids` 使用 JSON 数组字符串。
 - Workspace 共享知识库只读；System 共享资源页面按自身 API 维护，不组合 Workspace 文件夹移动等操作。
+- System 共享知识库、模型、工具菜单复用功能本地 `authorized-workspace-action/index.vue`，打开同目录的
+  `AuthorizedWorkspaceDialog` 配置工作空间白名单／黑名单；保留弹窗实例，关闭动画结束后清空本次数据，
+  保存失败保留草稿。
 
 资源授权和关联资源入口按需挂载公共抽屉，关闭动画结束后卸载。授权使用资源数据的
 `workspace_id`；关联资源抽屉的查询与工作空间展示规则见组件和 API 文档。
diff --git a/ui/src/views/application-detail/overview/display-setting/DisplaySettingDialog.vue b/ui/src/views/application-detail/overview/display-setting/DisplaySettingDialog.vue
index d42eaf77689..edb1c13bfb7 100644
--- a/ui/src/views/application-detail/overview/display-setting/DisplaySettingDialog.vue
+++ b/ui/src/views/application-detail/overview/display-setting/DisplaySettingDialog.vue
@@ -176,30 +176,10 @@ defineExpose({ open })
 </script>
 
 <template>
-  <MkDialog
-    v-model="visible"
-    title="显示设置"
-    :width="960"
-    :before-close="
-      (done: () => void) => {
-        if (!loading && !saving) done()
-      }
-    "
-    @closed="handleClosed"
-  >
-    <template #header>
-      <div class="flex-between pr-6">
-        <h3>显示设置</h3>
-        <!-- 恢复默认展示配置 -->
-        <el-button link :disabled="!loaded || loading || saving" @click="handleRestoreDefault">
-          <MkIcon :icon="Refresh" />
-          <span>恢复默认</span>
-        </el-button>
-      </div>
-    </template>
+  <MkDialog v-model="visible" title="显示设置" align-center class="mk-aside-content-dialog" :width="1000" @closed="handleClosed">
     <div v-loading="loading" class="min-h-60">
-      <div v-if="loaded" class="grid gap-6 md:grid-cols-[400px_minmax(0,1fr)]" :inert="saving">
-        <div class="relative h-142 rounded-lg border border-N200 bg-N100 p-5">
+      <div v-if="loaded" class="grid gap-6 grid-cols-2" :inert="saving">
+        <div class="relative">
           <div class="flex-column h-full overflow-hidden rounded-xl border border-N200 bg-white shadow-lg">
             <div class="flex-between gap-3 border-b border-N200 bg-N100 px-4 py-3" :style="previewHeaderStyle">
               <div class="flex-align-center min-w-0 gap-2">
@@ -249,105 +229,104 @@ defineExpose({ open })
             </el-avatar>
           </div>
         </div>
-        <el-scrollbar max-height="568px">
-          <el-form :model="displayForm" label-position="top" class="pr-3" @submit.prevent>
-            <div class="grid grid-cols-2 gap-4">
-              <el-form-item label="自定义主题色">
-                <div class="flex-align-center gap-2">
-                  <el-color-picker v-model="displayForm.custom_theme.theme_color" />
-                  <span v-if="!displayForm.custom_theme.theme_color" class="text-N600">默认</span>
-                </div>
-              </el-form-item>
-              <el-form-item label="头部标题字体颜色"><el-color-picker v-model="displayForm.custom_theme.header_font_color" /></el-form-item>
-            </div>
-            <el-form-item label="语言">
-              <el-select v-model="displayForm.language" clearable placeholder="跟随系统">
-                <el-option v-for="language in languageOptions" :key="language.value" :label="language.label" :value="language.value" />
-              </el-select>
-            </el-form-item>
-            <div class="space-y-3">
-              <template v-for="field in imageFields" :key="field.key">
-                <div class="rounded-lg border border-N200 p-3">
-                  <div class="flex-between gap-3">
-                    <h6>{{ field.label }}</h6>
-                    <div class="flex-align-center gap-3">
-                      <el-checkbox v-if="'visibility' in field" v-model="displayForm[field.visibility]">显示</el-checkbox>
-                      <!-- 替换当前展示图片 -->
-                      <el-upload
-                        action="#"
-                        :auto-upload="false"
-                        :show-file-list="false"
-                        accept="image/jpeg,image/png,image/gif"
-                        :on-change="(file: UploadFile) => handleImageChange(file, field.key)"
-                      >
-                        <el-button size="small">替换</el-button>
-                      </el-upload>
-                    </div>
+        <div>
+          <el-scrollbar max-height="568px">
+            <el-form :model="displayForm" label-position="top" class="pr-3" @submit.prevent>
+              <div class="grid grid-cols-2 gap-4">
+                <el-form-item label="自定义主题色">
+                  <div class="flex-align-center gap-2">
+                    <el-color-picker v-model="displayForm.custom_theme.theme_color" />
+                    <span v-if="!displayForm.custom_theme.theme_color" class="text-N600">默认</span>
                   </div>
-                  <p class="mt-2 text-sm text-N600">
-                    {{ field.key === 'chat_background' ? '' : '建议尺寸 32 × 32，' }}支持 JPG、PNG、GIF，大小不超过 10 MB
-                  </p>
-                  <div v-if="field.key === 'float_icon'" class="mt-3 border-t border-N200 pt-3">
-                    <div class="flex-between mb-2">
-                      <span>图标默认位置</span>
-                      <el-checkbox v-model="displayForm.draggable">可拖拽位置</el-checkbox>
+                </el-form-item>
+                <el-form-item label="头部标题字体颜色"><el-color-picker v-model="displayForm.custom_theme.header_font_color" /></el-form-item>
+              </div>
+              <el-form-item label="语言">
+                <el-select v-model="displayForm.language" clearable placeholder="跟随系统">
+                  <el-option v-for="language in languageOptions" :key="language.value" :label="language.label" :value="language.value" />
+                </el-select>
+              </el-form-item>
+              <div class="space-y-3">
+                <template v-for="field in imageFields" :key="field.key">
+                  <div class="rounded-lg border border-N200 p-3">
+                    <div class="flex-between gap-3">
+                      <h6>{{ field.label }}</h6>
+                      <div class="flex-align-center gap-3">
+                        <el-checkbox v-if="'visibility' in field" v-model="displayForm[field.visibility]">显示</el-checkbox>
+                        <!-- 替换当前展示图片 -->
+                        <el-upload
+                          action="#"
+                          :auto-upload="false"
+                          :show-file-list="false"
+                          accept="image/jpeg,image/png,image/gif"
+                          :on-change="(file: UploadFile) => handleImageChange(file, field.key)"
+                        >
+                          <el-button size="small">替换</el-button>
+                        </el-upload>
+                      </div>
                     </div>
-                    <div class="grid grid-cols-2 gap-3">
-                      <div class="flex-align-center gap-1">
-                        <el-select v-model="displayForm.float_location.x.type" class="w-17! shrink-0">
-                          <el-option label="左" value="left" />
-                          <el-option label="右" value="right" />
-                        </el-select>
-                        <el-input-number
-                          v-model="displayForm.float_location.x.value"
-                          class="min-w-0! w-full!"
-                          :min="0"
-                          :precision="0"
-                          :value-on-clear="0"
-                          controls-position="right"
-                          align="left"
-                        />
-                        <span>px</span>
+                    <p class="mt-2 text-sm text-N600">
+                      {{ field.key === 'chat_background' ? '' : '建议尺寸 32 × 32，' }}支持 JPG、PNG、GIF，大小不超过 10 MB
+                    </p>
+                    <div v-if="field.key === 'float_icon'" class="mt-3 border-t border-N200 pt-3">
+                      <div class="flex-between mb-2">
+                        <span>图标默认位置</span>
+                        <el-checkbox v-model="displayForm.draggable">可拖拽位置</el-checkbox>
                       </div>
-                      <div class="flex-align-center gap-1">
-                        <el-select v-model="displayForm.float_location.y.type" class="w-17! shrink-0">
-                          <el-option label="上" value="top" />
-                          <el-option label="下" value="bottom" />
-                        </el-select>
-                        <el-input-number
-                          v-model="displayForm.float_location.y.value"
-                          class="min-w-0! w-full!"
-                          :min="0"
-                          :precision="0"
-                          :value-on-clear="0"
-                          controls-position="right"
-                          align="left"
-                        />
-                        <span>px</span>
+                      <div class="grid grid-cols-2 gap-3">
+                        <div class="flex-align-center gap-1">
+                          <el-select v-model="displayForm.float_location.x.type" class="w-17! shrink-0">
+                            <el-option label="左" value="left" />
+                            <el-option label="右" value="right" />
+                          </el-select>
+                          <el-input-number
+                            v-model="displayForm.float_location.x.value"
+                            class="min-w-0! w-full!"
+                            :min="0"
+                            :precision="0"
+                            :value-on-clear="0"
+                            controls-position="right"
+                            align="left"
+                          />
+                          <span>px</span>
+                        </div>
+                        <div class="flex-align-center gap-1">
+                          <el-select v-model="displayForm.float_location.y.type" class="w-17! shrink-0">
+                            <el-option label="上" value="top" />
+                            <el-option label="下" value="bottom" />
+                          </el-select>
+                          <el-input-number
+                            v-model="displayForm.float_location.y.value"
+                            class="min-w-0! w-full!"
+                            :min="0"
+                            :precision="0"
+                            :value-on-clear="0"
+                            controls-position="right"
+                            align="left"
+                          />
+                          <span>px</span>
+                        </div>
                       </div>
                     </div>
                   </div>
-                </div>
-              </template>
-            </div>
-            <div class="mt-3 flex-column items-start">
-              <el-checkbox v-for="option in displayOptions" :key="option.key" v-model="displayForm[option.key]">{{ option.label }}</el-checkbox>
-              <el-input v-if="displayForm.disclaimer" v-model="displayForm.disclaimer_value" :maxlength="128" placeholder="请输入免责声明" />
-            </div>
-          </el-form>
-        </el-scrollbar>
-      </div>
-      <div v-else-if="!loading" class="flex-col-center min-h-60 gap-3">
-        <span class="text-N600">显示设置加载失败</span>
-        <!-- 重新加载展示配置 -->
-        <el-button @click="loadSetting">重新加载</el-button>
+                </template>
+              </div>
+              <div class="mt-3 flex-column items-start">
+                <el-checkbox v-for="option in displayOptions" :key="option.key" v-model="displayForm[option.key]">{{ option.label }}</el-checkbox>
+                <el-input v-if="displayForm.disclaimer" v-model="displayForm.disclaimer_value" :maxlength="128" placeholder="请输入免责声明" />
+              </div>
+            </el-form>
+          </el-scrollbar>
+          <el-button link :disabled="!loaded || loading || saving" @click="handleRestoreDefault">
+            <MkIcon :icon="Refresh" />
+            <span>恢复默认</span>
+          </el-button>
+          <!-- 取消展示设置 -->
+          <el-button :disabled="loading || saving" @click="visible = false">取消</el-button>
+          <!-- 保存展示设置 -->
+          <el-button type="primary" :loading="saving" :disabled="!loaded || loading" @click="handleSave">保存</el-button>
+        </div>
       </div>
     </div>
-    <template #footer>
-      <!-- 取消展示设置 -->
-      <el-button :disabled="loading || saving" @click="visible = false">取消</el-button>
-      <!-- 保存展示设置 -->
-      <el-button type="primary" :loading="saving" :disabled="!loaded || loading" @click="handleSave">保存</el-button>
-    </template>
   </MkDialog>
 </template>
diff --git a/ui/src/views/login/index.vue b/ui/src/views/login/index.vue
index 92b6d653691..489d4765365 100644
--- a/ui/src/views/login/index.vue
+++ b/ui/src/views/login/index.vue
@@ -38,6 +38,7 @@ const qrCodeLoginConfig = computed<LoginConfig>(() => ({
 const showLoginModeSwitch = computed(() => accountLoginMethods.value.length > 0 && qrCodeProviders.value.length > 0)
 
 onBeforeMount(() => {
+  // TODO 根据默认跳转
   isLoading.value = true
   auth
     .loadPlatformProfile()
diff --git a/ui/src/views/system/shared-resources/authorized-workspace-action/AuthorizedWorkspaceDialog.vue b/ui/src/views/system/shared-resources/authorized-workspace-action/AuthorizedWorkspaceDialog.vue
new file mode 100644
index 00000000000..17d20a7e746
--- /dev/null
+++ b/ui/src/views/system/shared-resources/authorized-workspace-action/AuthorizedWorkspaceDialog.vue
@@ -0,0 +1,151 @@
+<script setup lang="ts">
+import { computed, ref } from 'vue'
+import { RESOURCE_TYPE } from '@/api/enums'
+import type { SharedResourceType, SharedWorkspaceAuthorization, WorkspaceItem } from '@/api/types'
+import AuthorizationApi from '@/api/admin/system/shared-resources/authorization'
+import WorkspaceApi from '@/api/admin/system/workspace'
+import { MsgSuccess } from '@/utils/message'
+
+const WHITE_LIST = 'WHITE_LIST'
+const BLACK_LIST = 'BLACK_LIST'
+
+/* 查询当前资源的工作空间授权。 */
+const visible = ref(false)
+const loading = ref(false)
+const resourceId = ref('')
+const resourceType = ref<SharedResourceType>(RESOURCE_TYPE.KNOWLEDGE)
+const authenticationType = ref<SharedWorkspaceAuthorization['authentication_type']>(WHITE_LIST)
+const search = ref('')
+const workspaces = ref<(WorkspaceItem & { id: string })[]>([])
+const checkedWorkspaceIds = ref<string[]>([])
+const filteredWorkspaces = computed(() => workspaces.value.filter(({ name }) => name.includes(search.value)))
+const selectedWorkspaces = computed(() => workspaces.value.filter(({ id }) => checkedWorkspaceIds.value.includes(id)))
+const checkAll = computed({
+  get: () => workspaces.value.length > 0 && checkedWorkspaceIds.value.length === workspaces.value.length,
+  set: (checked: boolean) => {
+    checkedWorkspaceIds.value = checked ? workspaces.value.map(({ id }) => id) : []
+  },
+})
+const isIndeterminate = computed(() => checkedWorkspaceIds.value.length > 0 && checkedWorkspaceIds.value.length < workspaces.value.length)
+
+function open(resource: { id: string }, type: SharedResourceType) {
+  if (loading.value) return
+  resourceId.value = resource.id
+  resourceType.value = type
+  loading.value = true
+  return Promise.all([AuthorizationApi.getSharedAuthorization(resourceType.value, resourceId.value), WorkspaceApi.getSystemWorkspaceList()])
+    .then(([authorization, workspaceOptions]) => {
+      workspaces.value = workspaceOptions.filter((workspace): workspace is WorkspaceItem & { id: string } => !!workspace.id)
+      authenticationType.value = authorization?.authentication_type ?? WHITE_LIST
+      checkedWorkspaceIds.value = (authorization?.workspace_id_list ?? []).filter((id) => workspaces.value.some((workspace) => workspace.id === id))
+      visible.value = true
+    })
+    .finally(() => {
+      loading.value = false
+    })
+}
+
+/* 保存成功才关闭，失败保留授权草稿。 */
+function handleConfirm() {
+  if (loading.value) return
+  loading.value = true
+  return AuthorizationApi.postSharedAuthorization(resourceType.value, resourceId.value, {
+    authentication_type: authenticationType.value,
+    workspace_id_list: [...checkedWorkspaceIds.value],
+  })
+    .then(() => {
+      MsgSuccess('操作成功')
+      visible.value = false
+    })
+    .finally(() => {
+      loading.value = false
+    })
+}
+
+function handleRemoveWorkspace(workspaceId: string) {
+  checkedWorkspaceIds.value = checkedWorkspaceIds.value.filter((id) => id !== workspaceId)
+}
+
+/* 关闭动画结束后清空本次授权数据。 */
+function handleClosed() {
+  resourceId.value = ''
+  resourceType.value = RESOURCE_TYPE.KNOWLEDGE
+  authenticationType.value = WHITE_LIST
+  search.value = ''
+  workspaces.value = []
+  checkedWorkspaceIds.value = []
+  loading.value = false
+}
+
+defineExpose({ open })
+</script>
+
+<template>
+  <MkDialog v-model="visible" align-center title="授权工作空间" width="840" content-class="h-120" @closed="handleClosed">
+    <template #subtitle>被授权的工作空间，可使用当前资源</template>
+    <div v-loading="loading" class="flex-column h-full">
+      <p class="shrink-0">类型</p>
+      <el-radio-group v-model="authenticationType" class="shrink-0">
+        <el-radio :value="WHITE_LIST">白名单</el-radio>
+        <el-radio :value="BLACK_LIST">黑名单</el-radio>
+      </el-radio-group>
+      <p class="mt-2 mb-2 shrink-0">选择工作空间</p>
+      <div class="grid min-h-0 flex-1 grid-cols-2 overflow-hidden rounded-md border">
+        <!-- 左边 -->
+        <section class="flex-column min-h-0 border-r">
+          <div class="shrink-0 p-4 pb-0">
+            <MkSearchInput v-model="search" />
+          </div>
+
+          <div class="flex-column min-h-0 flex-1">
+            <!-- 全选工作空间 -->
+            <div class="p-2 pb-0">
+              <el-checkbox v-if="!search" v-model="checkAll" :indeterminate="isIndeterminate" class="w-full shrink-0 rounded-md p-2 hover:bg-N900/10">
+                全选
+              </el-checkbox>
+            </div>
+            <el-scrollbar class="min-h-0 flex-1 p-2 pt-0">
+              <el-checkbox-group v-model="checkedWorkspaceIds" class="mk-checkbox-group-vertical">
+                <el-checkbox
+                  v-for="workspace in filteredWorkspaces"
+                  :key="workspace.id"
+                  :value="workspace.id"
+                  class="rounded-md px-2 py-2 hover:bg-N900/10"
+                >
+                  <div class="flex-align-center min-w-0 gap-2">
+                    <MkIcon name="icon_moments-categories_outlined" class="shrink-0" />
+                    <span class="block min-w-0 truncate" :title="workspace.name">{{ workspace.name }}</span>
+                  </div>
+                </el-checkbox>
+              </el-checkbox-group>
+              <MkEmpty v-if="!filteredWorkspaces.length" :type="search ? 'search' : 'default'" />
+            </el-scrollbar>
+          </div>
+        </section>
+        <!-- 右边 -->
+        <section class="flex-column min-h-0">
+          <div class="flex-between shrink-0 p-4 pb-3 mt-1">
+            <span>已选：{{ checkedWorkspaceIds.length }} 个</span>
+            <!-- 清空已选工作空间 -->
+            <el-button link type="primary" @click="checkedWorkspaceIds = []">清空</el-button>
+          </div>
+          <el-scrollbar class="min-h-0 flex-1" wrap-class="p-2 pt-0">
+            <template v-for="workspace in selectedWorkspaces" :key="workspace.id">
+              <div class="flex-between gap-2 rounded-md p-2 hover:bg-N900/10">
+                <span class="truncate" :title="workspace.name">{{ workspace.name }}</span>
+                <!-- 移除已选工作空间 -->
+                <el-button text class="-mr-1" @click="handleRemoveWorkspace(workspace.id)"><MkIcon name="icon_close_outlined" /></el-button>
+              </div>
+            </template>
+          </el-scrollbar>
+        </section>
+      </div>
+    </div>
+    <template #footer>
+      <!-- 取消工作空间授权 -->
+      <el-button plain :disabled="loading" @click="visible = false">取消</el-button>
+      <!-- 保存工作空间授权 -->
+      <el-button type="primary" :loading="loading" @click="handleConfirm">保存</el-button>
+    </template>
+  </MkDialog>
+</template>
diff --git a/ui/src/views/system/shared-resources/authorized-workspace-action/index.vue b/ui/src/views/system/shared-resources/authorized-workspace-action/index.vue
new file mode 100644
index 00000000000..a91556eeb4a
--- /dev/null
+++ b/ui/src/views/system/shared-resources/authorized-workspace-action/index.vue
@@ -0,0 +1,27 @@
+<script setup lang="ts">
+import { useTemplateRef } from 'vue'
+import type { SharedResourceType } from '@/api/types'
+import AuthorizedWorkspaceDialog from './AuthorizedWorkspaceDialog.vue'
+
+defineOptions({ name: 'AuthorizedWorkspaceAction' })
+const props = defineProps<{
+  resource: { id: string }
+  resourceType: SharedResourceType
+  label: string
+}>()
+
+/* 打开工作空间授权弹窗。 */
+const authorizedWorkspaceDialogRef = useTemplateRef<InstanceType<typeof AuthorizedWorkspaceDialog>>('authorizedWorkspaceDialogRef')
+function handleOpenAuthorizedWorkspace() {
+  return authorizedWorkspaceDialogRef.value?.open(props.resource, props.resourceType)
+}
+</script>
+
+<template>
+  <!-- 授权工作空间 -->
+  <MkDropdownItem @click.stop="handleOpenAuthorizedWorkspace">
+    <template #icon><MkIcon name="icon-lock" /></template>
+    <span>{{ label }}</span>
+  </MkDropdownItem>
+  <AuthorizedWorkspaceDialog ref="authorizedWorkspaceDialogRef" />
+</template>
diff --git a/ui/src/views/system/shared-resources/knowledge/index.vue b/ui/src/views/system/shared-resources/knowledge/index.vue
index ee78154cac7..da8c9e0b47d 100644
--- a/ui/src/views/system/shared-resources/knowledge/index.vue
+++ b/ui/src/views/system/shared-resources/knowledge/index.vue
@@ -1,4 +1,5 @@
 <script setup lang="ts">
+import AuthorizedWorkspaceAction from '../authorized-workspace-action/index.vue'
 import { computed, ref, useTemplateRef } from 'vue'
 import { useRouter } from 'vue-router'
 import { KNOWLEDGE_TYPE_MAP } from '@/constants/knowledge'
@@ -7,7 +8,7 @@ import SystemSharedKnowledgeApi from '@/api/admin/system/shared-resources/knowle
 import SystemSharedRelatedResourcesApi from '@/api/admin/system/shared-resources/related-resources'
 import SystemCommonApi from '@/api/admin/system/common'
 import type { Dict, KnowledgeItem, OptionItem } from '@/api/types'
-import { KNOWLEDGE_TYPE } from '@/api/enums'
+import { RESOURCE_TYPE, KNOWLEDGE_TYPE } from '@/api/enums'
 import KnowledgeCard from '@/views/knowledge/knowledge-card/KnowledgeCard.vue'
 import ButtonCreateKnowledge from '@/views/knowledge/components/ButtonCreateKnowledge.vue'
 import ButtonTemplateStore from '@/views/knowledge/components/ButtonTemplateStore.vue'
@@ -140,9 +141,12 @@ function handleSearchChange(query?: Dict<unknown>) {
                     :api="SystemSharedKnowledgeApi"
                     :knowledge="knowledge"
                   />
+
+                  <!-- 授权工作空间 -->
+                  <AuthorizedWorkspaceAction label="授权工作空间" :resource="knowledge" :resource-type="RESOURCE_TYPE.KNOWLEDGE" />
+
                   <!-- 查看关联资源 -->
                   <RelatedResourcesKnowledgeAction label="查看关联资源" :api="SystemSharedRelatedResourcesApi" :knowledge="knowledge" />
-                  <!-- TODO 授权工作空间 -->
                   <!-- 导出共享知识库 -->
                   <ExportKnowledgeAction
                     v-model:loading="knowledgeOperationLoading"
diff --git a/ui/src/views/system/shared-resources/model/index.vue b/ui/src/views/system/shared-resources/model/index.vue
index 5a751052f44..4502da22eba 100644
--- a/ui/src/views/system/shared-resources/model/index.vue
+++ b/ui/src/views/system/shared-resources/model/index.vue
@@ -1,4 +1,5 @@
 <script lang="ts" setup>
+import AuthorizedWorkspaceAction from '../authorized-workspace-action/index.vue'
 import { computed, onMounted, ref } from 'vue'
 import type { Dict, ModelItem, ModelProviderItem, OptionItem } from '@/api/types'
 import { MODEL_TYPE_LABELS } from '@/constants'
@@ -11,6 +12,7 @@ import ButtonAddModel from '@/views/model/create-model/ButtonAddModel.vue'
 import ModelProvider from '@/views/model/components/ModelProvider.vue'
 import { DeleteModelAction, EditModelAction, ParamSettingAction, RelatedResourcesModelAction } from '@/views/model/model-card/action-dropdown'
 import perm from '@/permission'
+import { RESOURCE_TYPE } from '@/api/enums'
 
 const DEFAULT_MODEL_PROVIDER: ModelProviderItem = { icon: '', name: '全部模型', provider: 'all' }
 
@@ -88,7 +90,13 @@ onMounted(() => {
         <div class="flex-align-center">
           <MkComplexSearch :fields="searchFields" @change="handleSearchChange" />
           <!-- 添加模型 -->
-          <ButtonAddModel v-if="perm.model.share.create()" :api="SystemSharedModelApi" :current-provider="currentProvider" :providers="modelProviders" @refresh="loadModels" />
+          <ButtonAddModel
+            v-if="perm.model.share.create()"
+            :api="SystemSharedModelApi"
+            :current-provider="currentProvider"
+            :providers="modelProviders"
+            @refresh="loadModels"
+          />
         </div>
       </component>
       <div v-loading="loading">
@@ -97,10 +105,23 @@ onMounted(() => {
             <ModelCard :api="SystemSharedModelApi" :model="model" :provider="getModelProvider(model)" :refresh="loadModels" :shared="true">
               <template #action-dropdown>
                 <!-- 编辑 -->
-                <EditModelAction v-if="perm.model.share.modify()" label="编辑" :api="SystemSharedModelApi" :model="model" :provider="getModelProvider(model)" @refresh="loadModels" />
-                <!-- // TODO 授权工作空间 -->
+                <EditModelAction
+                  v-if="perm.model.share.modify()"
+                  label="编辑"
+                  :api="SystemSharedModelApi"
+                  :model="model"
+                  :provider="getModelProvider(model)"
+                  @refresh="loadModels"
+                />
                 <!-- 模型参数设置 -->
-                <ParamSettingAction v-if="model.model_type !== 'RERANKER' && perm.model.share.paramSetting()" label="模型参数设置" :api="SystemSharedModelApi" :model="model" />
+                <ParamSettingAction
+                  v-if="model.model_type !== 'RERANKER' && perm.model.share.paramSetting()"
+                  label="模型参数设置"
+                  :api="SystemSharedModelApi"
+                  :model="model"
+                />
+                <!-- 授权工作空间 -->
+                <AuthorizedWorkspaceAction label="授权工作空间" :resource="model" :resource-type="RESOURCE_TYPE.MODEL" />
 
                 <!-- 查看关联资源 -->
                 <RelatedResourcesModelAction v-if="perm.model.share.relateMap()" label="查看关联资源" :api="RelatedResourcesApi" :model="model" />
diff --git a/ui/src/views/system/shared-resources/tool/index.vue b/ui/src/views/system/shared-resources/tool/index.vue
index 4c71efb5875..f0431904de0 100644
--- a/ui/src/views/system/shared-resources/tool/index.vue
+++ b/ui/src/views/system/shared-resources/tool/index.vue
@@ -1,4 +1,5 @@
 <script setup lang="ts">
+import AuthorizedWorkspaceAction from '../authorized-workspace-action/index.vue'
 import { computed, ref, useTemplateRef } from 'vue'
 import { useRouter } from 'vue-router'
 import SystemSharedRelatedResourcesApi from '@/api/admin/system/shared-resources/related-resources'
@@ -7,7 +8,7 @@ import CommonSystemApi from '@/api/admin/system/common'
 import SystemSharedToolWorkflowApi from '@/api/admin/system/shared-resources/tool/tool-workflow'
 import type { ParamsPage } from '@/api/admin/core/types'
 import type { Dict, OptionItem, ToolItem, ToolType } from '@/api/types'
-import { TOOL_TYPE } from '@/api/enums'
+import { RESOURCE_TYPE, TOOL_TYPE } from '@/api/enums'
 import { TOOL_TYPE_OPTIONS } from '@/constants'
 import ToolCard from '@/views/tool/tool-card/ToolCard.vue'
 import ToolStatusSwitch from '@/views/tool/tool-card/ToolStatusSwitch.vue'
@@ -129,7 +130,13 @@ function handleOpenWorkflow(tool: ToolItem, event: MouseEvent) {
               >
                 <template #actions>
                   <!-- 修改工具状态 -->
-                  <ToolStatusSwitch v-if="perm.tool.share.switch()" v-model:loading="toolOperationLoading" :api="SystemSharedToolApi" :tool="tool" @update="handleToolUpdate" />
+                  <ToolStatusSwitch
+                    v-if="perm.tool.share.switch()"
+                    v-model:loading="toolOperationLoading"
+                    :api="SystemSharedToolApi"
+                    :tool="tool"
+                    @update="handleToolUpdate"
+                  />
                   <el-divider direction="vertical" class="ml-1!" />
                 </template>
                 <template #action-dropdown>
@@ -178,8 +185,16 @@ function handleOpenWorkflow(tool: ToolItem, event: MouseEvent) {
                     :api="SystemSharedToolApi"
                     :tool="tool"
                   />
+                  <!-- 授权工作空间 -->
+                  <AuthorizedWorkspaceAction label="授权工作空间" :resource="tool" :resource-type="RESOURCE_TYPE.TOOL" />
+
                   <!-- 查看关联资源 -->
-                  <RelatedResourcesToolAction v-if="perm.tool.share.relateMap()" label="查看关联资源" :api="SystemSharedRelatedResourcesApi" :tool="tool" />
+                  <RelatedResourcesToolAction
+                    v-if="perm.tool.share.relateMap()"
+                    label="查看关联资源"
+                    :api="SystemSharedRelatedResourcesApi"
+                    :tool="tool"
+                  />
                   <!-- 查看执行记录 -->
                   <ExecutionRecordToolAction
                     v-if="(tool.tool_type === TOOL_TYPE.CUSTOM || tool.tool_type === TOOL_TYPE.WORKFLOW) && perm.tool.share.record()"
@@ -187,7 +202,6 @@ function handleOpenWorkflow(tool: ToolItem, event: MouseEvent) {
                     :api="SystemSharedToolWorkflowApi"
                     :tool="tool"
                   />
-                  <!--  TODO 授权工作空间 -->
                   <!-- 导出共享工具 -->
                   <ExportToolAction
                     v-if="!tool.template_id && perm.tool.share.export()"