From 3f9df46e29f4a8ad3cc0ef7627965a2368d2fde7 Mon Sep 17 00:00:00 2001
From: wxg0103 <727495428@qq.com>
Date: Mon, 19 Oct 2026 17:14:21 +0800
Subject: [PATCH] feat: enhance permission handling and add user_id to batch
 save in document processing

---
 apps/oss/views/file.py | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/apps/oss/views/file.py b/apps/oss/views/file.py
index aae7360b863..bd12eef8793 100644
--- a/apps/oss/views/file.py
+++ b/apps/oss/views/file.py
@@ -6,7 +6,7 @@
 from rest_framework.views import APIView, Request
 
 from application.models import Application
-from common.auth import TokenAuth, AllTokenAuth, ChatTokenAuth
+from common.auth import TokenAuth, AllTokenAuth
 from common.auth.authentication import has_permissions, get_is_permissions
 from common.auth.constants.chat_permission_constants import ChatPermissionConstants
 from common.auth.constants.compare_constants import CompareConstants
@@ -89,7 +89,14 @@ class Operate(APIView):
             tags=[_("File")],  # type: ignore
         )
         @log(menu="file", operate="Delete file")
-        @has_permissions(RoleConstants.ADMIN, RoleConstants.WORKSPACE_MANAGE, RoleConstants.USER)
+        @has_permissions(
+            RoleConstants.ADMIN,
+            RoleConstants.WORKSPACE_MANAGE,
+            RoleConstants.USER,
+            RoleConstants.EXTENDS_WORKSPACE_MANAGE,
+            RoleConstants.EXTENDS_USER,
+            RoleConstants.EXTENDS_ADMIN,
+        )
         def delete(self, request: Request, file_id: str):
             return result.success(
                 FileSerializer.Operate(