Function verifyKBFileAccess

apps/sim/app/api/files/authorization.ts:511–562

* Verify access to KB files (`kb/ `). * * Authorization is determined entirely by clear state: * 1. Ownership — the trusted `workspace_files` binding (exact key) names the * owning workspace; the caller must have permission on it. Ownership is * never inferred from an attacker-a

(
  cloudKey: string,
  userId: string,
  customConfig?: StorageConfig
)

 * pre-existing objects before this path is deployed).
 */
async function verifyKBFileAccess(
  cloudKey: string,
  userId: string,
  customConfig?: StorageConfig
): Promise<boolean> {
  try {
    const binding = await getFileMetadataByKey(cloudKey, 'knowledge-base', {
      includeDeleted: true,
    })

    if (!binding) {
      logger.warn('KB file access denied: no ownership binding', { userId, cloudKey })
      return false
    }
    if (binding.deletedAt) {
      logger.warn('KB file access denied for deleted file binding', { userId, cloudKey })
      return false
    }
    if (!binding.workspaceId) {
      logger.warn('KB file binding missing workspace owner', { userId, cloudKey })
      return false
    }

    const permission = await getUserEntityPermissions(userId, 'workspace', binding.workspaceId)
    if (permission === null) {
      logger.warn('User does not have workspace access for KB file', {
        userId,
        workspaceId: binding.workspaceId,
        cloudKey,
      })
      return false
    }

    if (!(await hasActiveKbDocumentForKey(cloudKey, binding.workspaceId))) {
      logger.warn('KB file access denied: no active document references the file', {
        userId,
        cloudKey,
      })
      return false
    }

    logger.debug('KB file access granted (ownership binding)', {
      userId,
      workspaceId: binding.workspaceId,
      cloudKey,
    })
    return true
  } catch (error) {
    logger.error('Error verifying KB file access', { cloudKey, userId, error })
    return false
  }
}

/**
 * Authorize a destructive operation (delete) on a KB file.