SunnyQjm/dify
1
0 Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-10-04 13:47:55 +08:00
Code Issues Projects Releases Wiki Activity

fix(api): enforce APP_EDIT RBAC permission on MCP server refresh endpoint (#41235)

Browse Source
This commit is contained in:
Rafli Surya Wijaya authored and GitHub committed 2026-08-25 06:38:13 +00:00
1 parent 48315be2b1
commit cf236aed8a
2 files changed
+3 -3
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

api/controllers/console/app/mcp_server.py
+1 -1
View File
@@ -190,7 +190,7 @@ class AppMCPServerRefreshController(Resource):
@login_required
@account_initialization_required
@edit_permission_required
@rbac_permission_required(RBACResourceScope.APP, RBACPermission.APP_VIEW_LAYOUT)
@rbac_permission_required(RBACResourceScope.APP, RBACPermission.APP_EDIT)
@with_current_tenant_id
@get_app_model
def post(self, current_tenant_id: str, app_model: App):