openxiangda 1.0.136 → 1.0.138

package/packages/sdk/dist/runtime/index.d.mts

@@ -1,7 +1,7 @@
 import { PageContext, PageInfo, PageBridgeApi } from './react.mjs';
 export { ApiEnvelope, ApiPermissionListParams, AppAuthClient, AppFunctionConnectorApi, AppFunctionContext, AppFunctionDataViewApi, AppFunctionFormApi, AppFunctionFormGetByIdParams, AppFunctionFormQueryParams, AppFunctionFormWriteParams, AppFunctionNotificationApi, AppFunctionOperatorInfo, AppFunctionOrganizationApi, AppFunctionPermissionContext, AppFunctionRuntimeContext, ApproveTaskParams, AssignPermissionsParams, AssignRolesParams, AuthChallengePayload, AuthClientError, AuthClientErrorOptions, AuthClientOptions, AuthErrorExtra, AuthLogoutRedirectOptions, AuthMethod, AuthMethodType, AuthTokenData, AuthUser, BatchAddUsersToRoleParams, BatchSendNotificationByTypeParams, ChangeOrganizationAccountPasswordParams, ChangeUserRoleParams, ConnectorCallParams, ConnectorInvokeParams, ConnectorInvokeResult, ConnectorRequestBodyType, ConnectorResponseType, CreateApiPermissionParams, CreateFormPermissionGroupDto, CreateOrganizationAccountParams, CreateOrganizationDepartmentParams, CreatePagePermissionGroupDto, CreateRoleParams, CreateUiPermissionParams, CreateUserParams, CurrentUserDepartmentParents, CustomPageEntryConfig, CustomPageEntryMode, DataManagementConfigParams, DataManagementFilterState, DataPermissionConditionDto, DataPermissionDto, DataPermissionRuleDto, DataViewQueryParams, DataViewQueryResult, DataViewStatsParams, DingTalkLoginInput, DingTalkNotificationCapabilities, DingTalkNotificationCardConfig, DingTalkNotificationCardField, DingTalkNotificationCardMode, DingTalkNotificationCardPreview, DingTalkNotificationChannelConfig, DingTalkNotificationDeliveryMode, DingTalkNotificationPreviewResult, ExecuteProcessOperationInput, FieldAccessLevel, FieldAccessPolicyDto, FieldAccessPolicyItemDto, FieldOptionValue, FieldPermissionDto, FindNotificationConfigParams, FormAdvancedSearchParams, FormChangeRecordParams, FormCreateParams, FormCreateResult, FormDetailResult, FormExportParams, FormFieldValue, FormGetDetailParams, FormImportParams, FormInstanceIdentifierResult, FormPermissionGroup, FormRemoveParams, FormSearchParams, FormUpdateParams, FormUpdateResult, FunctionInvokeParams, FunctionInvokeResult, GetParentDepartmentsOptions, GetProcessInstanceParams, GetUserRolesParams, GuestLoginInput, ImportExportRecordDownloadParams, ImportExportRecordQuery, InitiatorApproverSelector, InstanceStatus, ListNotificationInboxParams, ListWorkCenterItemsParams, LoginLogGetParams, LoginLogListParams, LoginLogRecord, LoginLogStats, LoginLogStatsParams, LoginLogStatus, LoginMethodsResult, LoginPage, LoginPageProps, MarkAllNotificationReadResult, NotificationChannel, NotificationChannelConfig, NotificationChannelsConfig, NotificationConfigLevel, NotificationInboxListResult, NotificationInboxMessage, NotificationInboxReadStatus, NotificationMessageRecord, NotificationTemplate, NotificationTemplatePreview, NotificationTypeConfig, NotificationUnreadCountResult, OpenXiangdaPageProvider, OpenXiangdaPageProviderProps, OpenXiangdaProvider, OpenXiangdaProviderProps, OrganizationAccountListParams, OrganizationCapabilities, OrganizationListResult, PageApiPermissionRecord, PageApiResponse, PageAppInfo, PageBinaryResponse, PageDataManagementConfig, PageDataSourceDescriptor, PageDepartmentInfo, PageDepartmentRecord, PageHttpMethod, PageListResult, PageMessageApi, PageModalApi, PageNavigationApi, PageOffsetListResult, PagePermissionGroup, PagePermissionInfo, PageProvider, PageQueryValue, PageRequestOptions, PageRoleRecord, PageRouteInfo, PageScope, PageSdk, PageSdkError, PageSdkMeta, PageTransportDownloadPayload, PageTransportRequestPayload, PageUiPermissionRecord, PageUiPermissionType, PageUserInfo, PageUserRecord, PageUserType, PasswordLoginInput, PermissionBoundary, PermissionBoundaryFallback, PermissionBoundaryFallbackState, PermissionBoundaryProps, PhoneCodeInput, PhoneCodeLoginInput, PhoneCodeRegisterInput, PhoneCodeSendResult, PreviewDingTalkNotificationParams, PreviewNotificationTemplateParams, ProcessActionBar, ProcessActionBarProps, ProcessApproveAction, ProcessCapabilities, ProcessCapabilityOperation, ProcessInstanceLookupParams, ProcessPreviewPanel, ProcessPreviewPanelProps, ProcessTimeline, ProcessTimelineProps, PublicAccessClaim, PublicAccessClient, PublicAccessClientError, PublicAccessClientOptions, PublicAccessGate, PublicAccessGateProps, PublicAccessSessionData, PublicAccessSessionInput, QueryFormPermissionGroupDto, QueryPagePermissionGroupDto, RefreshInput, ResetOrganizationAccountPasswordParams, ResolveLoginUrlInput, ResolveProcessCapabilitiesParams, RoleListParams, RoleUsersParams, RouteAccessResult, RuntimeBootstrap, RuntimeErrorSnapshot, RuntimeErrorType, RuntimeLogoutOptions, RuntimeMenuItem, RuntimePagePermissions, RuntimeRedirectLoginOptions, RuntimeRequestError, RuntimeRequestState, RuntimeResolveLoginOptions, SaveDataManagementConfigParams, SearchComponentName, SearchExpression, SearchFieldKey, SearchGroup, SearchLogic, SearchOperator, SearchRule, SearchSortItem, SearchSystemField, SendNotificationByTypeParams, SendNotificationResult, SsoLoginUrlInput, SsoLoginUrlResult, SubFormRule, SwitchAppRoleParams, SwitchPlatformRoleParams, TerminateProcessInstanceParams, TriggerCallbackTaskParams, UiPermissionListParams, UpdateApiPermissionParams, UpdateFormPermissionGroupDto, UpdateOrganizationAccountParams, UpdateOrganizationDepartmentParams, UpdatePagePermissionGroupDto, UpdateRoleParams, UpdateUiPermissionParams, UpdateUserParams, UseAuthOptions, UseCanAccessRouteInput, UseLoginMethodsState, UseProcessActionsOptions, UseProcessActionsReturn, UseProcessCapabilitiesOptions, UseProcessCapabilitiesReturn, UsePublicAccessOptions, UsePublicAccessState, UserListParams, UserMenuPermissionsResponse, ValidateUserParams, ViewFieldPermissionValue, ViewOperationPermission, ViewPermissionSummary, WorkCenterBoxType, WorkCenterGroupedStat, WorkCenterItem, WorkCenterListResult, WorkCenterStats, WorkCenterStatsParams, WorkflowApproveParams, WorkflowCapabilityActionKey, WorkflowDefinitionByFormParams, WorkflowInitiatorSelectCandidatesParams, WorkflowInitiatorSelectRequirementsParams, WorkflowPreviewParams, WorkflowResubmitInitiatorSelectRequirementsParams, WorkflowResubmitParams, WorkflowReturnParams, WorkflowSaveTaskParams, WorkflowStartFromExistingInstanceParams, WorkflowTaskParams, WorkflowTransferParams, WorkflowWithdrawParams, createAuthClient, createPageSdk, createPublicAccessClient, createReactPage, getAuthErrorExtra, getAuthErrorReason, isAuthChallengeRequired, isAuthClientError, useAppMenus, useAuth, useCanAccessRoute, useCurrentUser, useDataSource, useFormViewPermissions, useLoginMethods, useMessage, useModal, useNavigation, useOpenXiangda, usePageContext, usePageProps, usePageRoute, usePageSdk, usePermission, useProcessActions, useProcessCapabilities, usePublicAccess, useRuntimeAuth, useRuntimeBootstrap } from './react.mjs';
 import React__default from 'react';
-import { F as FormSchema, a as FormRuntimeApi, b as FormRuntimeApiConfig, c as FieldDefinition } from '../ProcessPreview-Ci8_UsbN.mjs';
+import { F as FormSchema, a as FormRuntimeApi, b as FormRuntimeApiConfig, c as FieldDefinition } from '../ProcessPreview-CZJP8n3e.mjs';
 
 type RuntimeCssIsolation = "none" | "namespace" | "shadow";
 interface RuntimeHostBootstrap {

package/packages/sdk/dist/runtime/index.d.ts

@@ -1,7 +1,7 @@
 import { PageContext, PageInfo, PageBridgeApi } from './react.js';
 export { ApiEnvelope, ApiPermissionListParams, AppAuthClient, AppFunctionConnectorApi, AppFunctionContext, AppFunctionDataViewApi, AppFunctionFormApi, AppFunctionFormGetByIdParams, AppFunctionFormQueryParams, AppFunctionFormWriteParams, AppFunctionNotificationApi, AppFunctionOperatorInfo, AppFunctionOrganizationApi, AppFunctionPermissionContext, AppFunctionRuntimeContext, ApproveTaskParams, AssignPermissionsParams, AssignRolesParams, AuthChallengePayload, AuthClientError, AuthClientErrorOptions, AuthClientOptions, AuthErrorExtra, AuthLogoutRedirectOptions, AuthMethod, AuthMethodType, AuthTokenData, AuthUser, BatchAddUsersToRoleParams, BatchSendNotificationByTypeParams, ChangeOrganizationAccountPasswordParams, ChangeUserRoleParams, ConnectorCallParams, ConnectorInvokeParams, ConnectorInvokeResult, ConnectorRequestBodyType, ConnectorResponseType, CreateApiPermissionParams, CreateFormPermissionGroupDto, CreateOrganizationAccountParams, CreateOrganizationDepartmentParams, CreatePagePermissionGroupDto, CreateRoleParams, CreateUiPermissionParams, CreateUserParams, CurrentUserDepartmentParents, CustomPageEntryConfig, CustomPageEntryMode, DataManagementConfigParams, DataManagementFilterState, DataPermissionConditionDto, DataPermissionDto, DataPermissionRuleDto, DataViewQueryParams, DataViewQueryResult, DataViewStatsParams, DingTalkLoginInput, DingTalkNotificationCapabilities, DingTalkNotificationCardConfig, DingTalkNotificationCardField, DingTalkNotificationCardMode, DingTalkNotificationCardPreview, DingTalkNotificationChannelConfig, DingTalkNotificationDeliveryMode, DingTalkNotificationPreviewResult, ExecuteProcessOperationInput, FieldAccessLevel, FieldAccessPolicyDto, FieldAccessPolicyItemDto, FieldOptionValue, FieldPermissionDto, FindNotificationConfigParams, FormAdvancedSearchParams, FormChangeRecordParams, FormCreateParams, FormCreateResult, FormDetailResult, FormExportParams, FormFieldValue, FormGetDetailParams, FormImportParams, FormInstanceIdentifierResult, FormPermissionGroup, FormRemoveParams, FormSearchParams, FormUpdateParams, FormUpdateResult, FunctionInvokeParams, FunctionInvokeResult, GetParentDepartmentsOptions, GetProcessInstanceParams, GetUserRolesParams, GuestLoginInput, ImportExportRecordDownloadParams, ImportExportRecordQuery, InitiatorApproverSelector, InstanceStatus, ListNotificationInboxParams, ListWorkCenterItemsParams, LoginLogGetParams, LoginLogListParams, LoginLogRecord, LoginLogStats, LoginLogStatsParams, LoginLogStatus, LoginMethodsResult, LoginPage, LoginPageProps, MarkAllNotificationReadResult, NotificationChannel, NotificationChannelConfig, NotificationChannelsConfig, NotificationConfigLevel, NotificationInboxListResult, NotificationInboxMessage, NotificationInboxReadStatus, NotificationMessageRecord, NotificationTemplate, NotificationTemplatePreview, NotificationTypeConfig, NotificationUnreadCountResult, OpenXiangdaPageProvider, OpenXiangdaPageProviderProps, OpenXiangdaProvider, OpenXiangdaProviderProps, OrganizationAccountListParams, OrganizationCapabilities, OrganizationListResult, PageApiPermissionRecord, PageApiResponse, PageAppInfo, PageBinaryResponse, PageDataManagementConfig, PageDataSourceDescriptor, PageDepartmentInfo, PageDepartmentRecord, PageHttpMethod, PageListResult, PageMessageApi, PageModalApi, PageNavigationApi, PageOffsetListResult, PagePermissionGroup, PagePermissionInfo, PageProvider, PageQueryValue, PageRequestOptions, PageRoleRecord, PageRouteInfo, PageScope, PageSdk, PageSdkError, PageSdkMeta, PageTransportDownloadPayload, PageTransportRequestPayload, PageUiPermissionRecord, PageUiPermissionType, PageUserInfo, PageUserRecord, PageUserType, PasswordLoginInput, PermissionBoundary, PermissionBoundaryFallback, PermissionBoundaryFallbackState, PermissionBoundaryProps, PhoneCodeInput, PhoneCodeLoginInput, PhoneCodeRegisterInput, PhoneCodeSendResult, PreviewDingTalkNotificationParams, PreviewNotificationTemplateParams, ProcessActionBar, ProcessActionBarProps, ProcessApproveAction, ProcessCapabilities, ProcessCapabilityOperation, ProcessInstanceLookupParams, ProcessPreviewPanel, ProcessPreviewPanelProps, ProcessTimeline, ProcessTimelineProps, PublicAccessClaim, PublicAccessClient, PublicAccessClientError, PublicAccessClientOptions, PublicAccessGate, PublicAccessGateProps, PublicAccessSessionData, PublicAccessSessionInput, QueryFormPermissionGroupDto, QueryPagePermissionGroupDto, RefreshInput, ResetOrganizationAccountPasswordParams, ResolveLoginUrlInput, ResolveProcessCapabilitiesParams, RoleListParams, RoleUsersParams, RouteAccessResult, RuntimeBootstrap, RuntimeErrorSnapshot, RuntimeErrorType, RuntimeLogoutOptions, RuntimeMenuItem, RuntimePagePermissions, RuntimeRedirectLoginOptions, RuntimeRequestError, RuntimeRequestState, RuntimeResolveLoginOptions, SaveDataManagementConfigParams, SearchComponentName, SearchExpression, SearchFieldKey, SearchGroup, SearchLogic, SearchOperator, SearchRule, SearchSortItem, SearchSystemField, SendNotificationByTypeParams, SendNotificationResult, SsoLoginUrlInput, SsoLoginUrlResult, SubFormRule, SwitchAppRoleParams, SwitchPlatformRoleParams, TerminateProcessInstanceParams, TriggerCallbackTaskParams, UiPermissionListParams, UpdateApiPermissionParams, UpdateFormPermissionGroupDto, UpdateOrganizationAccountParams, UpdateOrganizationDepartmentParams, UpdatePagePermissionGroupDto, UpdateRoleParams, UpdateUiPermissionParams, UpdateUserParams, UseAuthOptions, UseCanAccessRouteInput, UseLoginMethodsState, UseProcessActionsOptions, UseProcessActionsReturn, UseProcessCapabilitiesOptions, UseProcessCapabilitiesReturn, UsePublicAccessOptions, UsePublicAccessState, UserListParams, UserMenuPermissionsResponse, ValidateUserParams, ViewFieldPermissionValue, ViewOperationPermission, ViewPermissionSummary, WorkCenterBoxType, WorkCenterGroupedStat, WorkCenterItem, WorkCenterListResult, WorkCenterStats, WorkCenterStatsParams, WorkflowApproveParams, WorkflowCapabilityActionKey, WorkflowDefinitionByFormParams, WorkflowInitiatorSelectCandidatesParams, WorkflowInitiatorSelectRequirementsParams, WorkflowPreviewParams, WorkflowResubmitInitiatorSelectRequirementsParams, WorkflowResubmitParams, WorkflowReturnParams, WorkflowSaveTaskParams, WorkflowStartFromExistingInstanceParams, WorkflowTaskParams, WorkflowTransferParams, WorkflowWithdrawParams, createAuthClient, createPageSdk, createPublicAccessClient, createReactPage, getAuthErrorExtra, getAuthErrorReason, isAuthChallengeRequired, isAuthClientError, useAppMenus, useAuth, useCanAccessRoute, useCurrentUser, useDataSource, useFormViewPermissions, useLoginMethods, useMessage, useModal, useNavigation, useOpenXiangda, usePageContext, usePageProps, usePageRoute, usePageSdk, usePermission, useProcessActions, useProcessCapabilities, usePublicAccess, useRuntimeAuth, useRuntimeBootstrap } from './react.js';
 import React__default from 'react';
-import { F as FormSchema, a as FormRuntimeApi, b as FormRuntimeApiConfig, c as FieldDefinition } from '../ProcessPreview-Ci8_UsbN.js';
+import { F as FormSchema, a as FormRuntimeApi, b as FormRuntimeApiConfig, c as FieldDefinition } from '../ProcessPreview-CZJP8n3e.js';
 
 type RuntimeCssIsolation = "none" | "namespace" | "shadow";
 interface RuntimeHostBootstrap {

package/packages/sdk/dist/runtime/index.mjs

@@ -2809,7 +2809,27 @@ var useDataSource = (name, options = {}) => {
 import { useCallback as useCallback2, useEffect as useEffect2, useMemo as useMemo3, useState as useState2 } from "react";
 var EMPTY_SUMMARY = {
   fieldPermissions: {},
-  operations: []
+  operations: [],
+  actions: []
+};
+var normalizeSummary = (summary) => {
+  const actions = Array.from(
+    /* @__PURE__ */ new Set([...summary?.actions || [], ...summary?.operations || []])
+  );
+  const can = actions.reduce(
+    (result, operation) => {
+      result[operation] = Boolean(summary?.can?.[operation] ?? true);
+      return result;
+    },
+    {}
+  );
+  return {
+    ...summary,
+    fieldPermissions: summary?.fieldPermissions || {},
+    operations: actions,
+    actions,
+    can
+  };
 };
 var toError = (error) => {
   if (error instanceof Error) {
@@ -2843,10 +2863,7 @@ var useFormViewPermissions = (formUuid, options = {}) => {
       });
       const nextSummary = nextResponse.result || EMPTY_SUMMARY;
       setResponse(nextResponse);
-      setSummary({
-        fieldPermissions: nextSummary.fieldPermissions || {},
-        operations: nextSummary.operations || []
-      });
+      setSummary(normalizeSummary(nextSummary));
       return nextResponse;
     } catch (requestError) {
       const nextError = toError(requestError);
@@ -2865,12 +2882,12 @@ var useFormViewPermissions = (formUuid, options = {}) => {
     void refresh();
   }, [immediate, refresh]);
   const operationSet = useMemo3(
-    () => new Set(summary.operations),
-    [summary.operations]
+    () => new Set(summary.actions || summary.operations),
+    [summary.actions, summary.operations]
   );
   const can = useCallback2(
-    (operation) => operationSet.has(operation),
-    [operationSet]
+    (operation) => Boolean(summary.can?.[operation] ?? operationSet.has(operation)),
+    [operationSet, summary.can]
   );
   const getFieldPermission = useCallback2(
     (fieldName) => summary.fieldPermissions[fieldName] || null,
@@ -21519,6 +21536,16 @@ var StandardFormPage = ({
 };
 
 // packages/sdk/src/components/core/dataManagementApi.ts
+var FORM_ACTION_PERMISSIONS = [
+  "view",
+  "create",
+  "edit",
+  "delete",
+  "export",
+  "import",
+  "change_records",
+  "workflow"
+];
 var unwrap = (response) => {
   if (response instanceof Blob) return response;
   if (response?.data?.result !== void 0) return response.data.result;
@@ -21527,6 +21554,24 @@ var unwrap = (response) => {
   return response;
 };
 var pickData = (value) => value?.data ?? value?.result ?? value;
+var normalizeActionSummary = (value) => {
+  const raw = pickData(value) || {};
+  const actions = Array.from(
+    /* @__PURE__ */ new Set([...raw.actions || [], ...raw.operations || []])
+  ).filter(
+    (action) => FORM_ACTION_PERMISSIONS.includes(action)
+  );
+  const can = FORM_ACTION_PERMISSIONS.reduce((result, action) => {
+    result[action] = Boolean(raw.can?.[action] ?? actions.includes(action));
+    return result;
+  }, {});
+  return {
+    ...raw,
+    actions,
+    operations: actions,
+    can
+  };
+};
 var normalizeComponentName = (field) => field?.componentName || field?.component_name || field?.component_type || field?.componentType || field?.type || "TextField";
 var normalizeField = (key, field, system = false) => ({
   ...field,
@@ -21778,6 +21823,14 @@ async function getDataManagementConfig(request, options) {
   });
   return unwrap(response);
 }
+async function getDataManagementActionSummary(request, params) {
+  const response = await request({
+    url: "/permission/form-group/view-permissions",
+    method: "get",
+    params
+  });
+  return normalizeActionSummary(response);
+}
 async function saveDataManagementConfig(request, options) {
   const targetFormUuid = options.menuFormUuid || options.formUuid;
   const personal = options.scope === "personal";
@@ -22838,7 +22891,9 @@ var DataManagementList = ({
   requestOverride,
   allowSchemaFallback = false,
   rowActions = [],
-  maxVisibleRowActions
+  maxVisibleRowActions,
+  permissionMode = "auto",
+  actionOverrides
 }) => {
   const rootRef = useRef22(null);
   const api = useMemo36(() => {
@@ -22889,6 +22944,9 @@ var DataManagementList = ({
   const [activeRecord, setActiveRecord] = useState41(null);
   const [detailOpen, setDetailOpen] = useState41(false);
   const [submitOpen, setSubmitOpen] = useState41(false);
+  const [actionSummary, setActionSummary] = useState41(null);
+  const [permissionLoading, setPermissionLoading] = useState41(permissionMode === "auto");
+  const [permissionError, setPermissionError] = useState41(null);
   const fetchStateRef = useRef22({});
   const isProcessForm = isProcessFormType(formType);
   const request = api.request;
@@ -22904,6 +22962,67 @@ var DataManagementList = ({
   const confirmDanger = useCallback26((title2, content, onOk) => {
     if (confirmAction(title2, content)) onOk();
   }, []);
+  useEffect49(() => {
+    let mounted = true;
+    if (permissionMode !== "auto") {
+      setActionSummary(null);
+      setPermissionLoading(false);
+      setPermissionError(null);
+      return () => {
+        mounted = false;
+      };
+    }
+    if (!appType || !formUuid) return void 0;
+    setPermissionLoading(true);
+    setPermissionError(null);
+    getDataManagementActionSummary(request, { appType, formUuid }).then((summary) => {
+      if (!mounted) return;
+      setActionSummary(summary);
+    }).catch((error) => {
+      if (!mounted) return;
+      setActionSummary(null);
+      setPermissionError(error instanceof Error ? error : new Error(String(error)));
+    }).finally(() => {
+      if (mounted) setPermissionLoading(false);
+    });
+    return () => {
+      mounted = false;
+    };
+  }, [appType, formUuid, permissionMode, request]);
+  const baseActionCan = useMemo36(() => {
+    if (permissionMode === "auto") {
+      return FORM_ACTION_PERMISSIONS.reduce((result, action) => {
+        result[action] = Boolean(actionSummary?.can?.[action]);
+        return result;
+      }, {});
+    }
+    return FORM_ACTION_PERMISSIONS.reduce((result, action) => {
+      result[action] = true;
+      return result;
+    }, {});
+  }, [actionSummary?.can, permissionMode]);
+  const canAction = useCallback26(
+    (action) => {
+      if (permissionLoading && permissionMode === "auto") return false;
+      if (permissionError && permissionMode === "auto") return action === "view";
+      let allowed = permissionMode === "off" ? true : Boolean(baseActionCan[action]);
+      if (permissionMode === "auto") {
+        allowed = allowed && actionOverrides?.[action] !== false;
+      } else if (actionOverrides?.[action] === false) {
+        allowed = false;
+      }
+      if (readonly && ["create", "edit", "delete", "import"].includes(action)) {
+        return false;
+      }
+      return allowed;
+    },
+    [actionOverrides, baseActionCan, permissionError, permissionLoading, permissionMode, readonly]
+  );
+  const canCreate = canAction("create");
+  const canDelete = canAction("delete");
+  const canExport = canAction("export");
+  const canImport = canAction("import");
+  const canWorkflow = canAction("workflow");
   const visibleFields = useMemo36(
     () => showFields.map((fieldId) => fields.find((field) => field.fieldId === fieldId)).filter(Boolean),
     [fields, showFields]
@@ -23147,11 +23266,15 @@ var DataManagementList = ({
   const handleDelete = useCallback26(
     async (ids) => {
       if (ids.length === 0) return;
+      if (!canDelete) {
+        message6.error("\u65E0\u6743\u9650\u5220\u9664\u6570\u636E");
+        return;
+      }
       await deleteDataManagementRows(request, { appType, formUuid, formInstanceIds: ids });
       setSelectedRowKeys([]);
       await loadData({ current, pageSize });
     },
-    [appType, current, formUuid, loadData, pageSize, request]
+    [appType, canDelete, current, formUuid, loadData, pageSize, request]
   );
   const getSelectedRecordIds = useCallback26(
     () => selectedRowKeys.map((key) => {
@@ -23191,6 +23314,10 @@ var DataManagementList = ({
     }
   };
   const handleExport = async (scope) => {
+    if (!canExport) {
+      message6.error("\u65E0\u6743\u9650\u5BFC\u51FA\u6570\u636E");
+      return;
+    }
     const selectedIds = scope === "selected" ? getSelectedRecordIds() : [];
     if (scope === "selected" && selectedIds.length === 0) {
       message6.warning("\u8BF7\u5148\u9009\u62E9\u8981\u5BFC\u51FA\u7684\u8BB0\u5F55");
@@ -23229,6 +23356,10 @@ var DataManagementList = ({
     }
   };
   const handleDownloadTemplate = async () => {
+    if (!canImport) {
+      message6.error("\u65E0\u6743\u9650\u5BFC\u5165\u6570\u636E");
+      return;
+    }
     setTemplateDownloading(true);
     try {
       const response = await downloadDataManagementImportTemplate(request, { appType, formUuid });
@@ -23242,6 +23373,8 @@ var DataManagementList = ({
     }
   };
   const loadTransferRecords = async (type) => {
+    if (type === "import" && !canImport) return;
+    if (type === "export" && !canExport) return;
     setRecordTab(type);
     setRecordsOpen(true);
     const result = await getDataManagementTransferRecords(request, {
@@ -23254,6 +23387,10 @@ var DataManagementList = ({
     setTransferRecords(result.records);
   };
   const handleImportPreview = async (file) => {
+    if (!canImport) {
+      message6.error("\u65E0\u6743\u9650\u5BFC\u5165\u6570\u636E");
+      return Upload3.LIST_IGNORE;
+    }
     const base64 = await fileToBase64(file);
     setImportBase64(base64);
     const result = await importPreviewDataManagementRows(request, {
@@ -23267,6 +23404,10 @@ var DataManagementList = ({
   };
   const handleImportConfirm = async () => {
     if (!importBase64) return;
+    if (!canImport) {
+      message6.error("\u65E0\u6743\u9650\u5BFC\u5165\u6570\u636E");
+      return;
+    }
     await importDataManagementRows(request, { appType, formUuid, fileBase64: importBase64 });
     message6.success("\u5BFC\u5165\u4EFB\u52A1\u5DF2\u521B\u5EFA");
     setImportOpen(false);
@@ -23275,7 +23416,7 @@ var DataManagementList = ({
     await loadData({ current: 1, pageSize });
   };
   const visibleRowActionLimit = normalizeMaxVisibleRowActions(maxVisibleRowActions);
-  const rowActionCount = 1 + rowActions.length + (readonly ? 0 : 1) + (isProcessForm ? 1 : 0);
+  const rowActionCount = 1 + rowActions.filter((action) => !action.requiredAction || canAction(action.requiredAction)).length + (canDelete ? 1 : 0) + (isProcessForm && canWorkflow ? 1 : 0);
   const actionColumnWidth = Math.max(
     ACTION_COLUMN_MIN_WIDTH,
     Math.min(rowActionCount, visibleRowActionLimit) * ACTION_BUTTON_ESTIMATED_WIDTH + (rowActionCount > visibleRowActionLimit ? ACTION_MORE_BUTTON_WIDTH : 0) + ACTION_COLUMN_HORIZONTAL_PADDING
@@ -23315,13 +23456,13 @@ var DataManagementList = ({
               label: "\u8BE6\u60C5",
               onClick: () => handleDetail(record)
             },
-            ...rowActions.map((action) => ({
+            ...rowActions.filter((action) => !action.requiredAction || canAction(action.requiredAction)).map((action) => ({
               key: action.key,
               label: action.label,
               danger: action.danger,
               onClick: () => action.onClick(record)
             })),
-            ...!readonly ? [
+            ...canDelete ? [
               {
                 key: "delete",
                 label: "\u5220\u9664",
@@ -23334,7 +23475,7 @@ var DataManagementList = ({
                 )
               }
             ] : [],
-            ...isProcessForm ? [
+            ...isProcessForm && canWorkflow ? [
               {
                 key: "workflow",
                 label: "\u6D41\u7A0B\u65E5\u5FD7",
@@ -23395,7 +23536,9 @@ var DataManagementList = ({
     handleDetail,
     isProcessForm,
     lockFieldIds,
-    readonly,
+    canAction,
+    canDelete,
+    canWorkflow,
     rowActions,
     updateColumnWidth,
     visibleRowActionLimit,
@@ -23435,7 +23578,7 @@ var DataManagementList = ({
         /* @__PURE__ */ jsxs50("div", { className: "mx-auto flex min-h-0 w-full max-w-[1440px] flex-col px-4 py-4 md:px-6", children: [
           title && /* @__PURE__ */ jsx100("div", { className: "mb-4", children: /* @__PURE__ */ jsx100("h2", { className: "m-0 text-xl font-semibold text-ant-color-text", children: title }) }),
           /* @__PURE__ */ jsx100("div", { className: "mb-4 flex flex-col gap-3 md:flex-row md:items-center", children: /* @__PURE__ */ jsxs50(Space10, { wrap: true, children: [
-            !readonly && (submitRenderer || runtimeFormSchema) && /* @__PURE__ */ jsx100(Button15, { icon: /* @__PURE__ */ jsx100(PlusOutlined2, {}), type: "primary", onClick: () => setSubmitOpen(true), children: "\u65B0\u589E" }),
+            canCreate && (submitRenderer || runtimeFormSchema) && /* @__PURE__ */ jsx100(Button15, { icon: /* @__PURE__ */ jsx100(PlusOutlined2, {}), type: "primary", onClick: () => setSubmitOpen(true), children: "\u65B0\u589E" }),
             /* @__PURE__ */ jsx100(
               Input15.Search,
               {
@@ -23461,7 +23604,7 @@ var DataManagementList = ({
             ),
             /* @__PURE__ */ jsx100(Button15, { icon: /* @__PURE__ */ jsx100(FilterOutlined, {}), onClick: () => setFilterOpen(true), children: "\u7B5B\u9009" }),
             /* @__PURE__ */ jsx100(Button15, { icon: /* @__PURE__ */ jsx100(SettingOutlined, {}), onClick: () => setColumnOpen(true), children: "\u5217\u8BBE\u7F6E" }),
-            /* @__PURE__ */ jsx100(
+            canExport && /* @__PURE__ */ jsx100(
               Dropdown2,
               {
                 getPopupContainer,
@@ -23486,7 +23629,7 @@ var DataManagementList = ({
                 children: /* @__PURE__ */ jsx100(Button15, { icon: /* @__PURE__ */ jsx100(DownloadOutlined2, {}), children: "\u5BFC\u51FA" })
               }
             ),
-            !readonly && /* @__PURE__ */ jsx100(
+            canImport && /* @__PURE__ */ jsx100(
               Dropdown2,
               {
                 getPopupContainer,
@@ -23512,7 +23655,7 @@ var DataManagementList = ({
               " \u6761"
             ] }),
             /* @__PURE__ */ jsxs50(Space10, { wrap: true, children: [
-              /* @__PURE__ */ jsx100(
+              canExport && /* @__PURE__ */ jsx100(
                 Button15,
                 {
                   icon: /* @__PURE__ */ jsx100(DownloadOutlined2, {}),
@@ -23524,8 +23667,8 @@ var DataManagementList = ({
                   children: "\u5BFC\u51FA\u9009\u4E2D"
                 }
               ),
-              !readonly && isProcessForm && /* @__PURE__ */ jsx100(Button15, { icon: /* @__PURE__ */ jsx100(SwapOutlined3, {}), onClick: handleBatchApprove, children: "\u6279\u91CF\u5BA1\u6279" }),
-              !readonly && /* @__PURE__ */ jsx100(
+              isProcessForm && canWorkflow && /* @__PURE__ */ jsx100(Button15, { icon: /* @__PURE__ */ jsx100(SwapOutlined3, {}), onClick: handleBatchApprove, children: "\u6279\u91CF\u5BA1\u6279" }),
+              canDelete && /* @__PURE__ */ jsx100(
                 Button15,
                 {
                   danger: true,
@@ -23830,7 +23973,7 @@ var DataManagementList = ({
             width: 720,
             onCancel: () => setImportOpen(false),
             onOk: handleImportConfirm,
-            okButtonProps: { disabled: !importBase64 },
+            okButtonProps: { disabled: !importBase64 || !canImport },
             okText: "\u786E\u8BA4\u5BFC\u5165",
             children: [
               /* @__PURE__ */ jsxs50("div", { className: "mb-3 flex flex-col gap-3 rounded-lg border border-ant-border-secondary bg-ant-bg-container px-4 py-3 md:flex-row md:items-center md:justify-between", children: [
@@ -23843,6 +23986,7 @@ var DataManagementList = ({
                   {
                     icon: /* @__PURE__ */ jsx100(DownloadOutlined2, {}),
                     loading: templateDownloading,
+                    disabled: !canImport,
                     onClick: handleDownloadTemplate,
                     children: "\u4E0B\u8F7D\u5BFC\u5165\u6A21\u677F"
                   }
@@ -23893,8 +24037,8 @@ var DataManagementList = ({
                 {
                   value: recordTab,
                   options: [
-                    { label: "\u5BFC\u5165\u8BB0\u5F55", value: "import" },
-                    { label: "\u5BFC\u51FA\u8BB0\u5F55", value: "export" }
+                    ...canImport ? [{ label: "\u5BFC\u5165\u8BB0\u5F55", value: "import" }] : [],
+                    ...canExport ? [{ label: "\u5BFC\u51FA\u8BB0\u5F55", value: "export" }] : []
                   ],
                   onChange: (value) => loadTransferRecords(value)
                 }