fix(knowledge): apply knowledge-base access checks consistently across auth types - #6426

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Aug 8, 2026 7:11pm

PR Summary

High Risk
Changes authorization on a knowledge API route and removes trust of internal JWT without per-user KB checks—a security fix that could break workflow tool schema enrichment if acting user is not threaded everywhere enrichSchema is invoked.

Overview
Fixes an authorization gap on /api/knowledge/[id]/tag-definitions: internal JWT callers were previously trusted without a knowledge-base check, and GET incorrectly required write access.

GET now requires an acting userId, runs checkKnowledgeBaseAccess for every auth type (read, not write), and returns 401/403/404 when appropriate. POST applies the same userId requirement and always runs checkKnowledgeBaseWriteAccess, aligning with sibling knowledge routes.

KB tag schema enrichers now receive WorkflowToolExecutionContext and call buildAuthHeaders(context.userId) when fetching tag definitions; enrichment is skipped when no acting user is present. SchemaEnrichmentConfig.enrichSchema is extended to pass that context from createLLMToolSchema.

Route and enricher tests cover session vs internal JWT, granted/denied/not-found, and missing acting user.

^{Reviewed by Cursor Bugbot for commit 3419e4f. Configure here.}

Greptile Summary

This PR consistently authorizes knowledge-base tag-definition requests using the acting user and propagates that identity through tool-schema enrichment.

• Requires an acting user for session and internal-JWT requests.
• Applies read authorization to GET and write authorization to POST.
• Passes workflow execution context into parameter schema enrichers.
• Adds route and enricher coverage for authorized, denied, missing, and unauthenticated paths.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

sequenceDiagram
  participant Tool as Workflow Tool
  participant Enricher as KB Schema Enricher
  participant Auth as Internal Auth Builder
  participant Route as Tag Definitions Route
  participant Access as KB Access Check
  participant Tags as Tag Service
  Tool->>Enricher: Enrich schema (KB ID, execution context)
  alt Acting user is present
    Enricher->>Auth: Build headers for user ID
    Auth-->>Enricher: Internal JWT headers
    Enricher->>Route: GET tag definitions
    Route->>Access: Check read access for acting user
    alt Access granted
      Access-->>Route: Allowed
      Route->>Tags: Get tag definitions
      Tags-->>Route: Definitions
      Route-->>Enricher: 200 with definitions
      Enricher-->>Tool: Enriched schema
    else Access denied
      Access-->>Route: Forbidden or not found
      Route-->>Enricher: 403 or 404
      Enricher-->>Tool: No enrichment
    end
  else Acting user is absent
    Enricher-->>Tool: Skip enrichment
  end

_{Reviews (2): Last reviewed commit: "chore(tests): mark tag-definition test f..." | Re-trigger Greptile}

@greptile

@cursor review