jyapayne/dify
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

only admin and owner can delete app (#810)

Browse source
This commit is contained in:
conghaoyuan 2023-08-12 14:18:21 +08:00 • committed by GitHub
commit c13a90ee69
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
api/controllers/console/app/app.py
View file

@ -294,6 +294,10 @@ class AppApi(Resource):
def delete(self, app_id): def delete(self, app_id):
"""Delete app""" """Delete app"""
app_id = str(app_id) app_id = str(app_id)
if current_user.current_tenant.current_role not in ['admin', 'owner']:
raise Forbidden()
app = _get_app(app_id, current_user.current_tenant_id) app = _get_app(app_id, current_user.current_tenant_id)
db.session.delete(app) db.session.delete(app)