From 862a94ce58496d088b1607c21eeeef36eaf63c4f Mon Sep 17 00:00:00 2001 From: wxg0103 <727495428@qq.com> Date: Fri, 16 Oct 2026 18:04:11 +0800 Subject: [PATCH] fix: add authorized tool retrieval and clear app_secret in auth config serializer --- apps/application/serializers/application.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/apps/application/serializers/application.py b/apps/application/serializers/application.py index e78a21f5d12..c51437d2c02 100644 --- a/apps/application/serializers/application.py +++ b/apps/application/serializers/application.py @@ -141,6 +141,10 @@ def get_authorized_tool_ids(user_id: str, workspace_id: str, tool_ids: List[str] ) if "VIEW" in permission.permission_list or "ROLE" in permission.permission_list } + get_authorized_tool = DatabaseModelManage.get_model("get_authorized_tool") + if get_authorized_tool is not None: + shared_tool_query_set = QuerySet(Tool).filter(id__in=tool_ids, scope=ToolScope.SHARED) + granted_tool_ids.update(str(tool.id) for tool in get_authorized_tool(shared_tool_query_set, workspace_id)) return [tool_id for tool_id in tool_ids if tool_id in granted_tool_ids]