model-platform

Files

T

tao.chenandtao.chen 1ba0ced3b4 fix(resources): enforce visibility on list + get (private invisible to non-owner)

回退 5483d19 的 workspace-wide 改动。用户真实语义：
- owner 永远可见自己的资源（含 private）
- 非 owner 只见别人 visibility in {workspace, public} 的资源
- admin 全部可见

can_view 与 list_resources 共享同一谓词。list 端点恢复
owner == me OR visibility in {workspace, public} 的过滤，
admin 跳过。get_resource / download_url / jupyter-relative-path
/ delete_resource 全部经 get_visible_resource → can_view，自然
收敛到同一语义。补 1 个 owner-看自己-private 测试，4 个
visibility 测试保持。

2026-09-02 10:10:41 +08:00

__init__.py

…

test_count_scripts.py

fix(scripts): actually escape LIKE pattern literals + scope count endpoint

2026-09-02 10:10:41 +08:00

test_list_scripts_parent_path.py

fix(scripts): actually escape LIKE pattern literals + scope count endpoint

2026-09-02 10:10:41 +08:00

test_resources.py

fix(resources): enforce visibility on list + get (private invisible to non-owner)

2026-09-02 10:10:41 +08:00