fix: enhance resource authorization by updating permission checks to include WORKSPACE_MANAGE role

Author: wxg0103

ui/src/permission/modules/system/authorization.ts

@@ -1,7 +1,6 @@
 /** 系统「资源授权」按钮权限（按资源类型分组）。$perm.authorization.application.read() ... */
 
-import { canSys } from '../../policy'
-import { PermissionConstants as P } from '../../core'
+import { PermissionConstants as P, hasPermission, RoleConstants, Compare } from '../../core'
 
 export default {
   /**
@@ -11,29 +10,37 @@ export default {
     /**
      * 系统「资源授权」智能体只读权限
      * */
-    read: () => canSys(P.APPLICATION_RESOURCE_PERMISSION_READ), edit: () => canSys(P.APPLICATION_RESOURCE_PERMISSION_EDIT) },
+    read: () => hasPermission([RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE, P.APPLICATION_RESOURCE_PERMISSION_READ], Compare.OR),
+    edit: () => hasPermission([RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE, P.APPLICATION_RESOURCE_PERMISSION_EDIT], Compare.OR),
+  },
   /**
    * 系统「资源授权」知识库权限
    * */
   knowledge: {
     /**
      * 系统「资源授权」知识库只读权限
      * */
-    read: () => canSys(P.KNOWLEDGE_RESOURCE_PERMISSION_READ), edit: () => canSys(P.KNOWLEDGE_RESOURCE_PERMISSION_EDIT) },
+    read: () => hasPermission([RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE, P.KNOWLEDGE_RESOURCE_PERMISSION_READ], Compare.OR),
+    edit: () => hasPermission([RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE, P.KNOWLEDGE_RESOURCE_PERMISSION_EDIT], Compare.OR),
+  },
   /**
    * 系统「资源授权」工具权限
    * */
   tool: {
     /**
      * 系统「资源授权」工具只读权限
      * */
-    read: () => canSys(P.TOOL_RESOURCE_PERMISSION_READ), edit: () => canSys(P.TOOL_RESOURCE_PERMISSION_EDIT) },
+    read: () => hasPermission([RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE, P.TOOL_RESOURCE_PERMISSION_READ], Compare.OR),
+    edit: () => hasPermission([RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE, P.TOOL_RESOURCE_PERMISSION_EDIT], Compare.OR),
+  },
   /**
    * 系统「资源授权」模型权限
    * */
   model: {
     /**
      * 系统「资源授权」模型只读权限
      * */
-    read: () => canSys(P.MODEL_RESOURCE_PERMISSION_READ), edit: () => canSys(P.MODEL_RESOURCE_PERMISSION_EDIT) },
+    read: () => hasPermission([RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE, P.MODEL_RESOURCE_PERMISSION_READ], Compare.OR),
+    edit: () => hasPermission([RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE, P.MODEL_RESOURCE_PERMISSION_EDIT], Compare.OR),
+  },
 }