wizardchen 3d30a9d842 feat(organization): implement tenant-based access control for organization visibility ...

Enhanced the GetOrganization and ListMembers methods to enforce tenant-based access control. Users can now only access organization details if their tenant is a member or if the organization is marked as searchable. This change prevents unauthorized enumeration of organizations and ensures sensitive member information is only accessible to authorized tenants.

Refs: #1303

2026-05-18 17:28:58 +08:00

..

dto

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

session

feat(rbac): lift org membership from per-user to per-tenant (Plan 3, #1303)

2026-05-18 17:28:58 +08:00

audit_log_test.go

feat(rbac): per-tenant audit log for RBAC events (PR 6, #1303)

2026-05-18 17:28:58 +08:00

audit_log.go

feat(rbac): per-tenant audit log for RBAC events (PR 6, #1303)

2026-05-18 17:28:58 +08:00

auth_register_invite_only_test.go

feat(rbac): tenant member management + invite_only gate (PR 3 of 3, #1303)

2026-05-18 17:28:58 +08:00

auth.go

fix(rbac): role-aware UI gates leaked write affordances after tenant switch

2026-05-18 17:28:58 +08:00

chunk.go

refactor(rbac): extend KB-access guard to chunk / knowledge / knowledgebase routes

2026-05-18 17:28:58 +08:00

chunker_debug_test.go

fix(chunker): post-review fixes for preview endpoint robustness

2026-05-06 17:17:07 +08:00

chunker_debug.go

docs(api): add and fix swag annotations on handlers

2026-05-12 13:16:58 +08:00

custom_agent.go

feat(favorites): implement user favorites and recents functionality

2026-05-18 17:28:58 +08:00

datasource_credentials.go

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

datasource.go

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

evaluation.go

feat: 新增API Key认证支持，优化Swagger文档安全配置

2025-12-22 15:01:09 +08:00

faq.go

refactor(rbac): KB-access guard at the route layer (no helper in handlers)

2026-05-18 17:28:58 +08:00

im.go

docs(api): add and fix swag annotations on handlers

2026-05-12 13:16:58 +08:00

initialization.go

fix(initialization): surface upstream and SSRF errors verbatim in test-connection responses

2026-05-17 15:27:52 +08:00

knowledge.go

feat(rbac): lift org membership from per-user to per-tenant (Plan 3, #1303)

2026-05-18 17:28:58 +08:00

knowledgebase_copy_preflight_test.go

feat(knowledge-base): validate vector store bindings on create, copy, and delete

2026-05-18 15:58:46 +08:00

knowledgebase_not_found_test.go

fix(kb): map ErrKnowledgeBaseNotFound to 404 across handler helpers

2026-05-14 20:12:41 +08:00

knowledgebase_pr3_response_test.go

feat(knowledge-base): validate vector store bindings on create, copy, and delete

2026-05-18 15:58:46 +08:00

knowledgebase_request_test.go

feat(knowledge-base): validate vector store bindings on create, copy, and delete

2026-05-18 15:58:46 +08:00

knowledgebase.go

feat(favorites): implement user favorites and recents functionality

2026-05-18 17:28:58 +08:00

mcp_credentials.go

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

mcp_service.go

fix(initialization): surface upstream and SSRF errors verbatim in test-connection responses

2026-05-17 15:27:52 +08:00

message_session_not_found_test.go

fix(session): map ErrSessionNotFound to 404 across all handlers

2026-05-14 16:47:36 +08:00

message.go

fix(session): map ErrSessionNotFound to 404 across all handlers

2026-05-14 16:47:36 +08:00

model_credentials.go

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

model.go

fix(initialization): surface upstream and SSRF errors verbatim in test-connection responses

2026-05-17 15:27:52 +08:00

organization.go

feat(organization): implement tenant-based access control for organization visibility

2026-05-18 17:28:58 +08:00

rbac_lookups_test.go

fix(rbac): wire chunk-id ownership chain for generated-question delete

2026-05-18 17:28:58 +08:00

rbac_lookups.go

fix(rbac): wire chunk-id ownership chain for generated-question delete

2026-05-18 17:28:58 +08:00

skill_handler.go

feat: update sandbox service configuration in Docker Compose files

2026-02-04 21:34:07 +08:00

storage_allowlist.go

feat(ks3): add KS3 object storage support

2026-05-05 00:22:27 +08:00

system.go

fix(initialization): surface upstream and SSRF errors verbatim in test-connection responses

2026-05-17 15:27:52 +08:00

tag.go

refactor(rbac): KB-access guard at the route layer (no helper in handlers)

2026-05-18 17:28:58 +08:00

tenant_member_test.go

refactor(rbac): centralise tenant-access guards in middleware

2026-05-18 17:28:58 +08:00

tenant_member.go

refactor(tenant_member): simplify tenant ID resolution in handlers

2026-05-18 17:28:58 +08:00

tenant.go

feat(organization): implement tenant-based access control for organization visibility

2026-05-18 17:28:58 +08:00

user_resource_favorite.go

feat(favorites): implement user favorites and recents functionality

2026-05-18 17:28:58 +08:00

vectorstore.go

feat: add VectorStore CRUD API endpoints and documentation

2026-04-14 17:34:57 +08:00

web_search_provider_credentials.go

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

web_search_provider.go

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

web_search.go

docs(api): add and fix swag annotations on handlers

2026-05-12 13:16:58 +08:00

wechat_qrcode.go

docs(api): add and fix swag annotations on handlers

2026-05-12 13:16:58 +08:00

weknoracloud.go

docs(api): add and fix swag annotations on handlers

2026-05-12 13:16:58 +08:00

wiki_page.go

perf(wiki): move ingest log to event table and index to on-demand API

2026-05-08 21:48:52 +08:00