feat: system and workspace knowledge permission

ui/src/permission/core/common.ts

@@ -92,6 +92,21 @@ export enum Group {
   SYSTEM_ACCESS = 'SYSTEM_ACCESS',
   SYSTEM_CHAT_LOG = 'SYSTEM_CHAT_LOG',
   CHAT = 'CHAT',
+  SYSTEM_SHARED_TOOL = 'SYSTEM_SHARED_TOOL',
+  SYSTEM_SHARED_KNOWLEDGE = 'SYSTEM_SHARED_KNOWLEDGE',
+  SYSTEM_SHARED_WORKFLOW = 'SYSTEM_SHARED_WORKFLOW',
+  SYSTEM_SHARED_DOCUMENT = 'SYSTEM_SHARED_DOCUMENT',
+  SYSTEM_SHARED_TAG = 'SYSTEM_SHARED_TAG',
+  SYSTEM_SHARED_PROBLEM = 'SYSTEM_SHARED_PROBLEM',
+  SYSTEM_SHARED_TERMBASE = 'SYSTEM_SHARED_TERMBASE',
+  SYSTEM_SHARED_HIT_TEST = 'SYSTEM_SHARED_HIT_TEST',
+  SYSTEM_SHARED_CHAT_USER= 'SYSTEM_SHARED_CHAT_USER',
+  SYSTEM_SHARED_IMAGE = 'SYSTEM_SHARED_IMAGE',
+  SYSTEM_SHARED_EXTERNAL_SERVICE = 'SYSTEM_SHARED_EXTERNAL_SERVICE',
+  SYSTEM_SHARED_KNOWLEDGE_SETTING = 'SYSTEM_SHARED_KNOWLEDGE_SETTING',
+  SYSTEM_SHARED_DOCUMENT_STRATEGY = 'SYSTEM_SHARED_DOCUMENT_STRATEGY',
+  SYSTEM_SHARED_SCHEDULED_SYNC = 'SYSTEM_SHARED_SCHEDULED_SYNC',
+  SYSTEM_SHARED_MODEL = 'SYSTEM_SHARED_MODEL',
 }
 
 /**
@@ -261,7 +276,7 @@ export class Permission {
     const workspace = this.workspaceId ? `:w:${this.workspaceId}` : ''
     const resource = this.resourceId ? `:r:${this.resourceId}` : ''
     const flag = this.flag ? `_${this.flag}` : ''
-    const group = (this.group === Group.SYSTEM_RES_KNOWLEDGE || this.group === Group.KNOWLEDGE) && this.subGroup !== this.group ? `${this.group}_${this.subGroup}` : this.group
+    const group =  this.group
     return `${group}${flag}${workspace}${resource}`
   }
 

ui/src/permission/modules/knowledge/index.ts

@@ -4,7 +4,11 @@ import workspace from './workspace'
 import system from './system'
 import share from './share'
 
-export default { workspace,
+export default {
+  /**
+   * 工作空间「知识库」权限
+   */
+  workspace,
   /**
    * 系统「知识库」权限
    * */

ui/src/permission/modules/knowledge/share.ts

@@ -6,14 +6,10 @@ import { Edition } from '@/permission/core/common'
 
 const share = {
   // —— 共享页不提供 ——
-  isShare: () => false,
   batchDelete: () => false,
   batchMove: () => false,
-  docRead: () => false,
   chatUserEdit: () => false,
   auth: () => false,
-  knowledgeChatUserRead: () => false,
-  hitTest: () => false,
   folderRead: () => false,
   folderCreate: () => false,
   folderEdit: () => false,
@@ -22,63 +18,284 @@ const share = {
   folderManage: () => false,
 
   // —— 知识库资源 ——
+/**
+ * 系统「共享知识库」只读权限
+ */
+  isShare: () => canSys(P.SHARED_KNOWLEDGE_READ),
+/**
+ * 系统「共享知识库」创建权限
+ */
   create: () => canSys(P.SHARED_KNOWLEDGE_CREATE),
+/**
+ * 系统「共享知识库」编辑权限
+ */
   edit: () => canSys(P.SHARED_KNOWLEDGE_EDIT),
+/**
+ * 系统「共享知识库」删除权限
+ */
   delete: () => canSys(P.SHARED_KNOWLEDGE_DELETE),
+/**
+ * 系统「共享知识库」同步权限
+ */
   sync: () => canSys(P.SHARED_KNOWLEDGE_SYNC),
+/**
+ * 系统「共享知识库」向量化权限
+ */
   vector: () => canSys(P.SHARED_KNOWLEDGE_VECTOR),
+/**
+ * 系统「共享知识库」生成问题权限
+ */
   generate: () => canSys(P.SHARED_KNOWLEDGE_GENERATE),
+/**
+ * 系统「共享知识库」导出权限
+ */
   export: () => canSys(P.SHARED_KNOWLEDGE_EXPORT),
+/**
+ * 系统「共享知识库」发布权限
+ */
   publish: () => canSys(P.SHARED_KNOWLEDGE_WORKFLOW_PUBLISH),
+/**
+ * 系统「共享知识库」查看关联资源权限
+ */
   relateMap: () => canSys(P.SHARED_KNOWLEDGE_RELATE_RESOURCE_VIEW),
+/**
+ * 系统「共享知识库」授权工作空间权限
+ */
   authToWorkspace: () => canSys(P.SHARED_KNOWLEDGE_TO_WORKSPACE),
+/**
+ * 系统「共享知识库」召回测试权限
+ */
+  hitTest: () => canSys(P.SHARED_KNOWLEDGE_HIT_TEST),
+
+   image: {
+    /**
+    * 系统「共享知识库」「图片」只读权限
+    */
+    read: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_READ),
+    /**
+    * 系统「共享知识库」「图片」创建权限
+    */
+    create: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_CREATE),
+    /**
+    * 系统「共享知识库」「图片」编辑权限
+    */
+    edit: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_EDIT),
+    /**
+    * 系统「共享知识库」「图片」删除权限
+    */
+    delete: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_DELETE),
+    /**
+    * 系统「共享知识库」「图片」下载原文档权限
+    */
+    download: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_DOWNLOAD_SOURCE_FILE),
+    /**
+    * 系统「共享知识库」「图片」生成问题权限
+    */
+    generate: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_GENERATE),
+    /**
+    * 系统「共享知识库」「图片」向量化权限
+    */
+    vector: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_VECTOR),
+    /**
+    * 系统「共享知识库」「图片」迁移权限
+    */
+    migrate: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_MIGRATE),
+    /**
+    * 系统「共享知识库」「图片」标签设置权限
+    */
+    tag: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_TAG),
+    /**
+    * 系统「共享知识库」「图片」替换原文档权限
+    */
+    replace: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_REPLACE),
+    /**
+    * 系统「共享知识库」「图片」分词索引权限
+    */
+    token: () => canSys(P.SHARED_KNOWLEDGE_IMAGE_TOKEN),
+  },
 
   // —— 文档 ——
+/**
+ * 系统「共享知识库」「文档」只读权限
+ */
+  docRead: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_READ),
+/**
+ * 系统「共享知识库」「文档」创建权限
+ */
   docCreate: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_CREATE),
+/**
+ * 系统「共享知识库」「文档」编辑权限
+ */
   docEdit: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_EDIT),
+/**
+ * 系统「共享知识库」「文档」删除权限
+ */
   docDelete: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_DELETE),
+/**
+ * 系统「共享知识库」「文档」同步权限
+ */
   docSync: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_SYNC),
+/**
+ * 系统「共享知识库」「文档」导出权限
+ */
   docExport: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_EXPORT),
+/**
+ * 系统「共享知识库」「文档」下载原文档权限
+ */
   docDownload: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_DOWNLOAD_SOURCE_FILE),
+/**
+ * 系统「共享知识库」「文档」向量化权限
+ */
   docVector: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_VECTOR),
+/**
+ * 系统「共享知识库」「文档」分词索引权限
+ */
   docToken: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_TOKEN),
+/**
+ * 系统「共享知识库」「文档」生成问题权限
+ */
   docGenerate: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_GENERATE),
+/**
+ * 系统「共享知识库」「文档」迁移权限
+ */
   docMigrate: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_MIGRATE),
+/**
+ * 系统「共享知识库」「文档」标签设置权限
+ */
   docTag: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_TAG),
+/**
+ * 系统「共享知识库」「文档」替换原文档权限
+ */
   docReplace: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_REPLACE),
 
   // —— 问题 ——
+/**
+ * 系统「共享知识库」「问题」只读权限
+ */
   problemRead: () => canSys(P.SHARED_KNOWLEDGE_PROBLEM_READ),
+/**
+ * 系统「共享知识库」「问题」创建权限
+ */
   problemCreate: () => canSys(P.SHARED_KNOWLEDGE_PROBLEM_CREATE),
+/**
+ * 系统「共享知识库」「问题」编辑权限
+ */
   problemEdit: () => canSys(P.SHARED_KNOWLEDGE_PROBLEM_EDIT),
+/**
+ * 系统「共享知识库」「问题」删除权限
+ */
   problemDelete: () => canSys(P.SHARED_KNOWLEDGE_PROBLEM_DELETE),
+/**
+ * 系统「共享知识库」「问题」关联分段权限
+ */
   problemRelate: () => canSys(P.SHARED_KNOWLEDGE_PROBLEM_RELATE),
 
   // —— 术语库 ——
+/**
+ * 系统「共享知识库」「词库」只读权限
+ */
   termbaseRead: () => canSys(P.SHARED_KNOWLEDGE_TERMBASE_READ),
+/**
+ * 系统「共享知识库」「词库」创建权限
+ */
   termbaseCreate: () => canSys(P.SHARED_KNOWLEDGE_TERMBASE_CREATE),
+/**
+ * 系统「共享知识库」「词库」编辑权限
+ */
   termbaseEdit: () => canSys(P.SHARED_KNOWLEDGE_TERMBASE_EDIT),
+/**
+ * 系统「共享知识库」「词库」删除权限
+ */
   termbaseDelete: () => canSys(P.SHARED_KNOWLEDGE_TERMBASE_DELETE),
-
+/**
+ * 系统「共享知识库」「词库」导出权限
+ */
+  termbaseExport: () => canSys(P.SHARED_KNOWLEDGE_TERMBASE_EXPORT),
   // —— 标签 ——
+/**
+ * 系统「共享知识库」「标签」只读权限
+ */
   tagRead: () => canSys(P.SHARED_KNOWLEDGE_TAG_READ),
+/**
+ * 系统「共享知识库」「标签」创建权限
+ */
   tagCreate: () => canSys(P.SHARED_KNOWLEDGE_TAG_CREATE),
+/**
+ * 系统「共享知识库」「标签」编辑权限
+ */
   tagEdit: () => canSys(P.SHARED_KNOWLEDGE_TAG_EDIT),
+/**
+ * 系统「共享知识库」「标签」删除权限
+ */
   tagDelete: () => canSys(P.SHARED_KNOWLEDGE_TAG_DELETE),
 
   // —— 工作流 ——
+/**
+ * 系统「共享知识库」「工作流」只读权限
+ */
   debug: () => canSys(P.SHARED_KNOWLEDGE_WORKFLOW_READ),
+/**
+ * 系统「共享知识库」「工作流」编辑权限
+ */
   workflowEdit: () => canSys(P.SHARED_KNOWLEDGE_WORKFLOW_EDIT),
+/**
+ * 系统「共享知识库」「工作流」导出权限
+ */
   workflowExport: () => canSys(P.SHARED_KNOWLEDGE_WORKFLOW_EXPORT),
 
   // —— 访客 ——
+/**
+ * 系统「共享知识库」「对话用户」只读权限
+ */
+  knowledgeChatUserRead: () => canSys(P.SHARED_KNOWLEDGE_CHAT_USER_READ),
+/**
+ * 系统「共享知识库」「对话用户」编辑权限
+ */
   knowledgeChatUserEdit: () => canSys(P.SHARED_KNOWLEDGE_CHAT_USER_EDIT),
 
+  // —— 外部检索服务 ——
+/**
+ * 系统「共享知识库」「外部检索服务」只读权限
+ */
+  knowledgeExternalServiceRead: () => canSys(P.SHARED_KNOWLEDGE_EXTERNAL_SERVICE_READ),
+/**
+ * 系统「共享知识库」「外部检索服务」编辑权限
+ */
+  knowledgeExternalServiceEdit: () => canSys(P.SHARED_KNOWLEDGE_EXTERNAL_SERVICE_EDIT),
+
+  // —— 外部检索服务 ——
+/**
+ * 系统「共享知识库」「设置」只读权限
+ */
+  settingRead: () => canSys(P.SHARED_KNOWLEDGE_SETTING_READ),
+/**
+ * 系统「共享知识库」「设置」编辑权限
+ */
+  settingEdit: () => canSys(P.SHARED_KNOWLEDGE_SETTING_EDIT),
+
+  // —— 定时同步 ——
+/**
+ * 系统「共享知识库」「定时同步」只读权限
+ */
+  scheduledSyncRead: () => canSys(P.SHARED_KNOWLEDGE_SCHEDULED_SYNC_READ),
+/**
+ * 系统「共享知识库」「定时同步」只读权限
+ */
+  scheduledSyncEdit: () => canSys(P.SHARED_KNOWLEDGE_SCHEDULED_SYNC_EDIT),
+  /**
+ * 系统「知识库」文档只读权限
+ */
+  documentStrategyRead: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_STRATEGY_READ),
+/**
+ * 系统「知识库」文档编辑权限
+ */
+  documentStrategyEdit: () => canSys(P.SHARED_KNOWLEDGE_DOCUMENT_STRATEGY_EDIT),
+
   // —— 组合：进入知识库 ——
   /**
-   * 系统「共享知识库」（系统 > 共享 > 知识库）只读权限
+   * 系统「共享知识库」只读权限
    * */
-  read: () => canSys(P.SHARED_KNOWLEDGE_WORKFLOW_READ) && hasEdition(Edition.EE),
+  read: () => canSys(P.SHARED_KNOWLEDGE_READ) && hasEdition(Edition.EE),
 }
 
 export default share