mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-09-22 08:12:00 +02:00
0551a562d8
* 🏗️ feat: Add Group model and schema with GroupType enum * 🏗️ feat: Introduce Permissions module and refactor role-based access control * 🏗️ feat: Refactor permissions handling and consolidate permission schemas * 🏗️ feat: Refactor role permissions handling and improve role initialization logic * 🏗️ feat: Update Role.spec.js to improve imports and enhance test structure * 🏗️ feat: Update access control logic to ensure proper permission checks in role handling * 🏗️ chore: Bump versions for librechat-data-provider to 0.7.75 and @librechat/data-schemas to 0.0.6 * 🏗️ feat: Improve role permissions handling by ensuring defaults are applied correctly * 🏗️ feat: Update role permissions schema to comment out unused SHARE permission * 🏗️ chore: Bump version of librechat-data-provider to 0.7.77 and remove unused groups field from IUser interface * 🏗️ chore: Downgrade version of librechat-data-provider to 0.7.76 * 🔧 chore: Bump versions for librechat-data-provider to 0.7.77 and data-schemas to 0.0.6 * 🏗️ chore: Update version of librechat-data-provider to 0.7.789 --------- Co-authored-by: Danny Avila <danny@librechat.ai>
90 lines
2.7 KiB
TypeScript
90 lines
2.7 KiB
TypeScript
import { z } from 'zod';
|
|
|
|
/**
|
|
* Enum for Permission Types
|
|
*/
|
|
export enum PermissionTypes {
|
|
/**
|
|
* Type for Prompt Permissions
|
|
*/
|
|
PROMPTS = 'PROMPTS',
|
|
/**
|
|
* Type for Bookmark Permissions
|
|
*/
|
|
BOOKMARKS = 'BOOKMARKS',
|
|
/**
|
|
* Type for Agent Permissions
|
|
*/
|
|
AGENTS = 'AGENTS',
|
|
/**
|
|
* Type for Multi-Conversation Permissions
|
|
*/
|
|
MULTI_CONVO = 'MULTI_CONVO',
|
|
/**
|
|
* Type for Temporary Chat
|
|
*/
|
|
TEMPORARY_CHAT = 'TEMPORARY_CHAT',
|
|
/**
|
|
* Type for using the "Run Code" LC Code Interpreter API feature
|
|
*/
|
|
RUN_CODE = 'RUN_CODE',
|
|
}
|
|
|
|
/**
|
|
* Enum for Role-Based Access Control Constants
|
|
*/
|
|
export enum Permissions {
|
|
SHARED_GLOBAL = 'SHARED_GLOBAL',
|
|
USE = 'USE',
|
|
CREATE = 'CREATE',
|
|
UPDATE = 'UPDATE',
|
|
READ = 'READ',
|
|
READ_AUTHOR = 'READ_AUTHOR',
|
|
SHARE = 'SHARE',
|
|
}
|
|
|
|
export const promptPermissionsSchema = z.object({
|
|
[Permissions.SHARED_GLOBAL]: z.boolean().default(false),
|
|
[Permissions.USE]: z.boolean().default(true),
|
|
[Permissions.CREATE]: z.boolean().default(true),
|
|
// [Permissions.SHARE]: z.boolean().default(false),
|
|
});
|
|
export type TPromptPermissions = z.infer<typeof promptPermissionsSchema>;
|
|
|
|
export const bookmarkPermissionsSchema = z.object({
|
|
[Permissions.USE]: z.boolean().default(true),
|
|
});
|
|
export type TBookmarkPermissions = z.infer<typeof bookmarkPermissionsSchema>;
|
|
|
|
export const agentPermissionsSchema = z.object({
|
|
[Permissions.SHARED_GLOBAL]: z.boolean().default(false),
|
|
[Permissions.USE]: z.boolean().default(true),
|
|
[Permissions.CREATE]: z.boolean().default(true),
|
|
// [Permissions.SHARE]: z.boolean().default(false),
|
|
});
|
|
export type TAgentPermissions = z.infer<typeof agentPermissionsSchema>;
|
|
|
|
export const multiConvoPermissionsSchema = z.object({
|
|
[Permissions.USE]: z.boolean().default(true),
|
|
});
|
|
export type TMultiConvoPermissions = z.infer<typeof multiConvoPermissionsSchema>;
|
|
|
|
export const temporaryChatPermissionsSchema = z.object({
|
|
[Permissions.USE]: z.boolean().default(true),
|
|
});
|
|
export type TTemporaryChatPermissions = z.infer<typeof temporaryChatPermissionsSchema>;
|
|
|
|
export const runCodePermissionsSchema = z.object({
|
|
[Permissions.USE]: z.boolean().default(true),
|
|
});
|
|
export type TRunCodePermissions = z.infer<typeof runCodePermissionsSchema>;
|
|
|
|
// Define a single permissions schema that holds all permission types.
|
|
export const permissionsSchema = z.object({
|
|
[PermissionTypes.PROMPTS]: promptPermissionsSchema,
|
|
[PermissionTypes.BOOKMARKS]: bookmarkPermissionsSchema,
|
|
[PermissionTypes.AGENTS]: agentPermissionsSchema,
|
|
[PermissionTypes.MULTI_CONVO]: multiConvoPermissionsSchema,
|
|
[PermissionTypes.TEMPORARY_CHAT]: temporaryChatPermissionsSchema,
|
|
[PermissionTypes.RUN_CODE]: runCodePermissionsSchema,
|
|
});
|