From b86fc82126338896c2758ccdce01257504b64b24 Mon Sep 17 00:00:00 2001 From: panxinying Date: Tue, 10 Nov 2026 17:18:45 +0800 Subject: [PATCH] fix: system user group permission error --- apps/users/views/system_user_group.py | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/apps/users/views/system_user_group.py b/apps/users/views/system_user_group.py index ab596282a54..5f704168c2c 100644 --- a/apps/users/views/system_user_group.py +++ b/apps/users/views/system_user_group.py @@ -58,7 +58,10 @@ class SystemUserGroupView(APIView): tags=["IAM/System User Group"], ) @has_permissions( - PermissionConstants.SYSTEM_USER_GROUP_CREATE, PermissionConstants.SYSTEM_USER_GROUP_EDIT, RoleConstants.ADMIN + PermissionConstants.SYSTEM_USER_GROUP_CREATE, + PermissionConstants.SYSTEM_USER_GROUP_EDIT, + RoleConstants.ADMIN, + RoleConstants.WORKSPACE_MANAGE, ) @log( menu="IAM/System User Group", @@ -100,7 +103,9 @@ class Delete(APIView): responses=DefaultModelResponse.get_response(), tags=["IAM/System User Group"], ) - @has_permissions(PermissionConstants.SYSTEM_USER_GROUP_DELETE, RoleConstants.ADMIN) + @has_permissions( + PermissionConstants.SYSTEM_USER_GROUP_DELETE, RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE + ) @log( menu="IAM/System User Group", operate="Delete System User Group", @@ -126,7 +131,9 @@ class AddMember(APIView): responses=DefaultModelResponse.get_response(), tags=["IAM/System User Group"], ) - @has_permissions(PermissionConstants.SYSTEM_USER_GROUP_ADD_MEMBER, RoleConstants.ADMIN) + @has_permissions( + PermissionConstants.SYSTEM_USER_GROUP_ADD_MEMBER, RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE + ) @log( menu="IAM/System User Group", operate="Add members to System User Group", @@ -155,7 +162,9 @@ class RemoveMember(APIView): responses=DefaultModelResponse.get_response(), tags=["IAM/System User Group"], ) - @has_permissions(PermissionConstants.SYSTEM_USER_GROUP_REMOVE_MEMBER, RoleConstants.ADMIN) + @has_permissions( + PermissionConstants.SYSTEM_USER_GROUP_REMOVE_MEMBER, RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE + ) @log( menu="IAM/System User Group", operate="Remove members from System User Group",