wizardchen
0b73080bb8
Prevent low-privileged tenant members from reading raw API keys and infrastructure credentials via tenant profile, KV config, model/MCP/web search listings, and KB initialization config responses.
23 lines
539 B
Go
23 lines
539 B
Go
package dto
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/Tencent/WeKnora/internal/types"
|
|
)
|
|
|
|
func adminContext() context.Context {
|
|
ctx := context.Background()
|
|
return context.WithValue(ctx, types.TenantRoleContextKey, types.TenantRoleAdmin)
|
|
}
|
|
|
|
func viewerContext() context.Context {
|
|
ctx := context.Background()
|
|
return context.WithValue(ctx, types.TenantRoleContextKey, types.TenantRoleViewer)
|
|
}
|
|
|
|
func ownerContext() context.Context {
|
|
ctx := context.Background()
|
|
return context.WithValue(ctx, types.TenantRoleContextKey, types.TenantRoleOwner)
|
|
}
|