From 336581221b4c9a592efa0b3f9fc8a43609239063 Mon Sep 17 00:00:00 2001 From: fit2cloud-chenyw Date: Tue, 14 Jul 2026 18:03:45 +0800 Subject: [PATCH] fix: Elevate permission levels via the assistant UI settings interface --- backend/apps/system/api/assistant.py | 1 + 1 file changed, 1 insertion(+) diff --git a/backend/apps/system/api/assistant.py b/backend/apps/system/api/assistant.py index c665778d..138e534c 100644 --- a/backend/apps/system/api/assistant.py +++ b/backend/apps/system/api/assistant.py @@ -165,6 +165,7 @@ def iterfile(): @router.patch('/ui', summary=f"{PLACEHOLDER_PREFIX}assistant_ui_api", description=f"{PLACEHOLDER_PREFIX}assistant_ui_api") +@require_permissions(permission=SqlbotPermission(role=['ws_admin'])) @system_log(LogConfig(operation_type=OperationType.UPDATE, module=OperationModules.APPLICATION, result_id_expr="id")) async def ui(session: SessionDep, data: str = Form(), files: List[UploadFile] = []): json_data = json.loads(data)