From bb20efbd2e4dda34d840b30a3753ec8b2f733d50 Mon Sep 17 00:00:00 2001
From: wxg0103 <727495428@qq.com>
Date: Tue, 21 Jul 2026 15:10:32 +0800
Subject: [PATCH] chore: update community submodule commit hash

---
 apps/common/constants/permission_constants.py | 14 ++++++++++++++
 apps/knowledge/views/document.py              |  2 --
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/apps/common/constants/permission_constants.py b/apps/common/constants/permission_constants.py
index 9163eaed254..be821db608f 100644
--- a/apps/common/constants/permission_constants.py
+++ b/apps/common/constants/permission_constants.py
@@ -202,6 +202,7 @@ class Operate(Enum):
     BATCH_DELETE = "READ+BATCH_DELETE"
     BATCH_MOVE = "READ+BATCH_MOVE"
     TOKEN = "READ+TOKEN" # 分词索引
+    TO_WORKSPACE= "READ+TO_WORKSPACE" # 授权到空间
 
 
 class RoleGroup(Enum):
@@ -446,6 +447,7 @@ def get_workspace_role(self):
     Group.TOOL_FOLDER.value: _("Folder"),
     # SystemGroup.RESOURCE.value: _("Resource"),
     Operate.TOKEN.value: _("Token Index"),
+    Operate.TO_WORKSPACE.value: _("Authorize to Workspace")
 }
 
 
@@ -1468,6 +1470,10 @@ class PermissionConstants(Enum):
         group=Group.SYSTEM_TOOL, operate=Operate.RECORD, role_list=[RoleConstants.ADMIN],
         parent_group=[SystemGroup.SHARED_TOOL], is_ee=settings.edition == "EE"
     )
+    SHARED_TOOL_TO_WORKSPACE = Permission(
+        group=Group.SYSTEM_TOOL, operate=Operate.TO_WORKSPACE, role_list=[RoleConstants.ADMIN],
+        parent_group=[SystemGroup.SHARED_TOOL], is_ee=settings.edition == "EE"
+    )
     SHARED_KNOWLEDGE_READ = Permission(
         group=Group.SYSTEM_KNOWLEDGE, operate=Operate.READ, role_list=[RoleConstants.ADMIN],
         parent_group=[SystemGroup.SHARED_KNOWLEDGE], is_ee=settings.edition == "EE"
@@ -1504,6 +1510,10 @@ class PermissionConstants(Enum):
         group=Group.SYSTEM_KNOWLEDGE, operate=Operate.RELATE_VIEW, role_list=[RoleConstants.ADMIN],
         parent_group=[SystemGroup.SHARED_KNOWLEDGE], is_ee=settings.edition == "EE"
     )
+    SHARED_KNOWLEDGE_TO_WORKSPACE = Permission(
+        group=Group.SYSTEM_KNOWLEDGE, operate=Operate.TO_WORKSPACE, role_list=[RoleConstants.ADMIN],
+        parent_group=[SystemGroup.SHARED_KNOWLEDGE], is_ee=settings.edition == "EE"
+    )
     SHARED_KNOWLEDGE_WORKFLOW_READ = Permission(
         group=Group.SYSTEM_KNOWLEDGE_WORKFLOW, operate=Operate.READ, role_list=[RoleConstants.ADMIN],
         parent_group=[SystemGroup.SHARED_KNOWLEDGE], is_ee=settings.edition == "EE"
@@ -1661,6 +1671,10 @@ class PermissionConstants(Enum):
         group=Group.SYSTEM_MODEL, operate=Operate.RELATE_VIEW, role_list=[RoleConstants.ADMIN],
         parent_group=[SystemGroup.SHARED_MODEL], is_ee=settings.edition == "EE"
     )
+    SHARED_MODEL_TO_WORKSPACE = Permission(
+        group=Group.SYSTEM_MODEL, operate=Operate.TO_WORKSPACE, role_list=[RoleConstants.ADMIN],
+        parent_group=[SystemGroup.SHARED_MODEL], is_ee=settings.edition == "EE"
+    )
     RESOURCE_APPLICATION_READ = Permission(
         group=Group.SYSTEM_RES_APPLICATION, operate=Operate.READ, role_list=[RoleConstants.ADMIN],
         parent_group=[SystemGroup.RESOURCE_APPLICATION], is_ee=settings.edition == "EE"
diff --git a/apps/knowledge/views/document.py b/apps/knowledge/views/document.py
index 503a32bb668..1984ed4b54a 100644
--- a/apps/knowledge/views/document.py
+++ b/apps/knowledge/views/document.py
@@ -679,8 +679,6 @@ class BatchTokenize(APIView):
         @has_permissions(
             PermissionConstants.KNOWLEDGE_DOCUMENT_TOKEN.get_workspace_knowledge_permission(),
             PermissionConstants.KNOWLEDGE_DOCUMENT_TOKEN.get_workspace_permission_workspace_manage_role(),
-            PermissionConstants.KNOWLEDGE_DOCUMENT_EDIT.get_workspace_knowledge_permission(),
-            PermissionConstants.KNOWLEDGE_DOCUMENT_EDIT.get_workspace_permission_workspace_manage_role(),
             RoleConstants.WORKSPACE_MANAGE.get_workspace_role(),
             ViewPermission(
                 [RoleConstants.USER.get_workspace_role()],