infiniflow / ragflow

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine based on deep document understanding.
https://ragflow.io
Apache License 2.0
18.18k stars 1.84k forks source link

[Feature Request]: User Management and Role-Based Access Control (RBAC) #2588

Open rplescia opened 2 days ago

rplescia commented 2 days ago

Is there an existing issue for the same feature request?

Is your feature request related to a problem?

No

Describe the feature you'd like

As an administrator, I want to have the ability to add/manage/remove a user's ability to access the application and control what features in the app they can use via roles so that it can be deployed in an organisation with more security restrictions. I also want to hide some features from less technical users to avoid confusing them with too much information.

New 'Admin' page for managing 'Users', 'Teams' and 'Roles'

3 System Roles that come 'out-of-the-box'

  1. Administrator: Full access
  2. Power User: Full access excluding the ability to add/change/remove users, teams and roles.
  3. Standard User: Access to all features excluding:
    • Add/modify/remove users, teams and roles.
    • Add/modify/remove model providers
    • 'System' Page is hidden from view

Describe the implementation you've considered

No response

Documentation, adoption, use case

No response

Additional information

No response