GithubBackup/Foxel
1
0
Fork 0
mirror of https://github.com/DrizzleTime/Foxel.git synced 2026-07-07 23:31:52 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: remove admin permission checks for vector database operations #36

Browse Source
This commit is contained in:
shiyu
2025-09-27 13:49:04 +08:00
parent a4af9475ef
commit 7caa602d93
1 changed files with 4 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
api/routes/vector_db.py
View File

@@ -24,8 +24,6 @@ class VectorDBConfigPayload(BaseModel):
@router.post("/clear-all", summary="清空向量数据库") @router.post("/clear-all", summary="清空向量数据库")
async def clear_vector_db(user: UserAccount = Depends(get_current_active_user)): async def clear_vector_db(user: UserAccount = Depends(get_current_active_user)):
if user.username != 'admin':
raise HTTPException(status_code=403, detail="仅管理员可操作")
try: try:
service = VectorDBService() service = VectorDBService()
await service.clear_all_data() await service.clear_all_data()
@@ -36,8 +34,6 @@ async def clear_vector_db(user: UserAccount = Depends(get_current_active_user)):
@router.get("/stats", summary="获取向量数据库统计") @router.get("/stats", summary="获取向量数据库统计")
async def get_vector_db_stats(user: UserAccount = Depends(get_current_active_user)): async def get_vector_db_stats(user: UserAccount = Depends(get_current_active_user)):
if user.username != 'admin':
raise HTTPException(status_code=403, detail="仅管理员可操作")
try: try:
service = VectorDBService() service = VectorDBService()
data = await service.get_all_stats() data = await service.get_all_stats()
@@ -48,15 +44,11 @@ async def get_vector_db_stats(user: UserAccount = Depends(get_current_active_use
@router.get("/providers", summary="列出可用向量数据库提供者") @router.get("/providers", summary="列出可用向量数据库提供者")
async def list_vector_providers(user: UserAccount = Depends(get_current_active_user)): async def list_vector_providers(user: UserAccount = Depends(get_current_active_user)):
if user.username != 'admin':
raise HTTPException(status_code=403, detail="仅管理员可操作")
return success(list_providers()) return success(list_providers())
@router.get("/config", summary="获取当前向量数据库配置") @router.get("/config", summary="获取当前向量数据库配置")
async def get_vector_db_config(user: UserAccount = Depends(get_current_active_user)): async def get_vector_db_config(user: UserAccount = Depends(get_current_active_user)):
if user.username != 'admin':
raise HTTPException(status_code=403, detail="仅管理员可操作")
service = VectorDBService() service = VectorDBService()
data = await service.current_provider() data = await service.current_provider()
return success(data) return success(data)
@@ -64,18 +56,17 @@ async def get_vector_db_config(user: UserAccount = Depends(get_current_active_us
@router.post("/config", summary="更新向量数据库配置") @router.post("/config", summary="更新向量数据库配置")
async def update_vector_db_config(payload: VectorDBConfigPayload, user: UserAccount = Depends(get_current_active_user)): async def update_vector_db_config(payload: VectorDBConfigPayload, user: UserAccount = Depends(get_current_active_user)):
if user.username != 'admin':
raise HTTPException(status_code=403, detail="仅管理员可操作")
entry = get_provider_entry(payload.type) entry = get_provider_entry(payload.type)
if not entry: if not entry:
raise HTTPException(status_code=400, detail=f"未知的向量数据库类型: {payload.type}") raise HTTPException(
status_code=400, detail=f"未知的向量数据库类型: {payload.type}")
if not entry.get("enabled", True): if not entry.get("enabled", True):
raise HTTPException(status_code=400, detail="该向量数据库类型暂不可用") raise HTTPException(status_code=400, detail="该向量数据库类型暂不可用")
provider_cls = get_provider_class(payload.type) provider_cls = get_provider_class(payload.type)
if not provider_cls: if not provider_cls:
raise HTTPException(status_code=400, detail=f"未找到类型 {payload.type} 对应的实现") raise HTTPException(
status_code=400, detail=f"未找到类型 {payload.type} 对应的实现")
# 先尝试建立连接，确保配置有效 # 先尝试建立连接，确保配置有效
test_provider = provider_cls(payload.config) test_provider = provider_cls(payload.config)