ragflow

mirror of https://github.com/infiniflow/ragflow.git synced 2026-05-18 23:46:21 +08:00

Files

dev b12eaee38b fix(api): enforce tenant access for connector routes (#14747 )

### What problem does this PR solve?

Fixes #14746.

Adds tenant access checks for connector-by-id REST routes before reading
connector details, mutating connector config/status, deleting
connectors, rebuilding, or listing sync logs. Unauthorized callers now
receive `RetCode.AUTHENTICATION_ERROR` with `No authorization.` without
reaching the connector/log mutation paths.

Validation:
- `python3 -m pytest
--confcutdir=test/testcases/test_web_api/test_connector_app
test/testcases/test_web_api/test_connector_app/test_connector_routes_unit.py`
- `uvx ruff check api/apps/restful_apis/connector_api.py
api/db/services/connector_service.py
test/testcases/test_web_api/test_connector_app/test_connector_routes_unit.py`

### Type of change

- [x] Bug Fix (non-breaking change which fixes an issue)

Co-authored-by: dev111-actor <dev111-actor@users.noreply.github.com>

2026-05-18 16:09:26 +08:00

test_agent_app

feat: add tag management for Agents with filtering and sorting (#14774 ) (#14799 )

2026-05-13 21:41:32 +08:00

test_auth_app

tests: improve RAGFlow coverage based on Codecov report (#13219 )

2026-02-26 19:03:26 +08:00

test_canvas_app

fix(agent): support iteration item aliases in child nodes (#14146 )

2026-05-12 13:05:21 +08:00

test_chunk_app

Fix: shared dataset chunk index lookup (#14764 )