tiennm99/DocsGPT
1
0 Fork 0
mirror of https://github.com/tiennm99/DocsGPT.git synced 2026-10-16 22:14:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge main (roles and access revamp) into connectors

Browse Source 
Main's access model (team editors and viewers, edit_credentials, owner-only
OAuth servers, per-user tool preferences, resource sponsors) now applies to
connection-backed tools and sources. Our migrations are renumbered to
0040_connections and 0041_connection_account_name, after main's
0038_resource_access_settings and 0039_resource_sponsors.

Where the two sides met: MCP tools save and load their connections as the
tool owner, editors may add a key (a new connection on the owner's account)
but never rewrite an existing connection's secret, fixed values stay
owner-only, and a member's own connection is used in member mode.
This commit is contained in:
arc53-machine committed 2026-09-29 14:02:26 +01:00
2 parents 7daa3eb972 7565aa9c4c
commit a1789d2ab4
167 files changed
+16909 -2126
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

tests/api/user/test_tools_routes.py
+16 -8
View File
@@ -1388,16 +1388,24 @@ class TestUpdateToolActionsHappy:
assert self._stored(pg_conn, tool)["active"] is True
def test_team_editor_can_change_actions_but_not_pins(self, app, pg_conn):
from docsgpt.storage.db.repositories.team_members import TeamMembersRepository
from docsgpt.storage.db.repositories.team_resource_grants import TeamResourceGrantsRepository
from docsgpt.storage.db.repositories.teams import TeamsRepository
owner, editor = "u-owner", "u-editor"
tool = self._seed_actions_tool(pg_conn, owner)
with patch("docsgpt.api.user.tools.routes.effective_write_owner", return_value=owner):
toggled = self._post(
app, pg_conn, editor, str(tool["id"]), [{"name": "telegram_send_message", "active": False}],
)
pinned = self._post(app, pg_conn, editor, str(tool["id"]), [{
"name": "telegram_send_message",
"parameters": {"properties": {"chat_id": {"filled_by_llm": False, "value": "666"}}},
}])
team = TeamsRepository(pg_conn).create("Pins", "t-pins", owner)
TeamMembersRepository(pg_conn).add_member(str(team["id"]), editor)
TeamResourceGrantsRepository(pg_conn).grant(
str(team["id"]), "tool", str(tool["id"]), owner, owner, access_level="editor",
)
toggled = self._post(
app, pg_conn, editor, str(tool["id"]), [{"name": "telegram_send_message", "active": False}],
)
pinned = self._post(app, pg_conn, editor, str(tool["id"]), [{
"name": "telegram_send_message",
"parameters": {"properties": {"chat_id": {"filled_by_llm": False, "value": "666"}}},
}])
assert toggled.status_code == 200
assert pinned.status_code == 403
stored = self._stored(pg_conn, tool)