fix: flowise 370 (#6409)

* add: new executions:update permissions and apply it to PUT /api/v1/executions endpoint

* add: executions:update permissions check in UI

* fix: review feedback

Author: 0xi4o

packages/server/src/enterprise/rbac/Permissions.ts

@@ -88,6 +88,7 @@ export class Permissions {
 
         const executionsCategory = new PermissionCategory('executions')
         executionsCategory.addPermission(new Permission('executions:view', 'View', true, true, true))
+        executionsCategory.addPermission(new Permission('executions:update', 'Update', true, true, true))
         executionsCategory.addPermission(new Permission('executions:delete', 'Delete', true, true, true))
         this.categories.push(executionsCategory)
 

packages/server/src/routes/executions/index.ts

@@ -8,7 +8,7 @@ router.get('/', checkAnyPermission('executions:view'), executionController.getAl
 router.get(['/', '/:id'], checkAnyPermission('executions:view'), executionController.getExecutionById)
 
 // PUT
-router.put(['/', '/:id'], executionController.updateExecution)
+router.put(['/', '/:id'], checkAnyPermission('executions:update'), executionController.updateExecution)
 
 // DELETE - single execution or multiple executions
 router.delete('/:id', checkAnyPermission('executions:delete'), executionController.deleteExecutions)

packages/ui/src/views/agentexecutions/ExecutionDetails.jsx

@@ -49,6 +49,9 @@ import executionsApi from '@/api/executions'
 // Hooks
 import useApi from '@/hooks/useApi'
 
+// RBAC
+import { Available } from '@/ui-component/rbac/available'
+
 const getIconColor = (status) => {
     switch (status) {
         case 'FINISHED':
@@ -768,21 +771,23 @@ export const ExecutionDetails = ({ open, isPublic, execution, metadata, onClose,
                         )}
 
                         {!isPublic && !localMetadata.isPublic && (
-                            <Chip
-                                sx={{ ml: 1, pl: 1 }}
-                                icon={
-                                    updateExecutionApi.loading ? (
-                                        <IconLoader size={15} className='spin-animation' />
-                                    ) : (
-                                        <IconShare size={15} />
-                                    )
-                                }
-                                variant='outlined'
-                                label={updateExecutionApi.loading ? 'Updating...' : 'Share'}
-                                className={'button'}
-                                onClick={() => onSharePublicly()}
-                                disabled={updateExecutionApi.loading}
-                            />
+                            <Available permission='executions:update'>
+                                <Chip
+                                    sx={{ ml: 1, pl: 1 }}
+                                    icon={
+                                        updateExecutionApi.loading ? (
+                                            <IconLoader size={15} className='spin-animation' />
+                                        ) : (
+                                            <IconShare size={15} />
+                                        )
+                                    }
+                                    variant='outlined'
+                                    label={updateExecutionApi.loading ? 'Updating...' : 'Share'}
+                                    className={'button'}
+                                    onClick={() => onSharePublicly()}
+                                    disabled={updateExecutionApi.loading}
+                                />
+                            </Available>
                         )}
 
                         {!isPublic && localMetadata.isPublic && (

packages/ui/src/views/agentexecutions/ShareExecutionDialog.jsx

@@ -14,6 +14,7 @@ import { enqueueSnackbar as enqueueSnackbarAction, closeSnackbar as closeSnackba
 // API
 import executionsApi from '@/api/executions'
 import useApi from '@/hooks/useApi'
+import { Available } from '@/ui-component/rbac/available'
 
 const ShareExecutionDialog = ({ show, executionId, onClose, onUnshare }) => {
     const portalElement = document.getElementById('portal')
@@ -104,9 +105,11 @@ const ShareExecutionDialog = ({ show, executionId, onClose, onUnshare }) => {
 
                 {/* Actions */}
                 <Box sx={{ display: 'flex', justifyContent: 'flex-end' }}>
-                    <Button color='error' onClick={handleUnshare} sx={{ mr: 1 }}>
-                        Unshare
-                    </Button>
+                    <Available permission='executions:update'>
+                        <Button color='error' onClick={handleUnshare} sx={{ mr: 1 }}>
+                            Unshare
+                        </Button>
+                    </Available>
                     <Button onClick={onClose}>Close</Button>
                 </Box>
             </DialogContent>