Method ensureAPIKeyManagePermission

api/service/mcp/key_service.go:179–199

(eid, userID int64, role int64, apiKey *model.APIKey)

}

func (s *APIKeyService) ensureAPIKeyManagePermission(eid, userID int64, role int64, apiKey *model.APIKey) error {
	if apiKey == nil {
		return errors.New("API密钥不存在")
	}

	if apiKey.LibraryID != nil {
		hasPerm, err := s.hasLibraryManagementPermission(eid, userID, *apiKey.LibraryID)
		if err != nil {
			return err
		}
		if !hasPerm {
			return errors.New("您没有权限管理此API密钥")
		}
		return nil
	}

	if role < model.RoleAdminUser {
		return errors.New("您没有权限管理全局API密钥")
	}
	return nil
}

func (s *APIKeyService) hasLibraryManagementPermission(eid, userID, libraryID int64) (bool, error) {
	permission, err := core.GetUserPermission(eid, model.RESOURCE_TYPE_LIBRARY, libraryID, userID)