arize-phoenix 12.4.0__tar.gz → 12.5.0__tar.gz

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: arize-phoenix
-Version: 12.4.0
+Version: 12.5.0
 Summary: AI Observability and Evaluation
 Project-URL: Documentation, https://arize.com/docs/phoenix/
 Project-URL: Issues, https://github.com/Arize-ai/phoenix/issues

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/auth.py

@@ -2,7 +2,7 @@ from __future__ import annotations
 
 import re
 from dataclasses import dataclass
-from datetime import datetime, timedelta
+from datetime import datetime, timedelta, timezone
 from enum import Enum, auto
 from hashlib import pbkdf2_hmac
 from typing import Any, Literal, Optional, Protocol
@@ -331,7 +331,13 @@ class ClaimSet:
 
     @property
     def status(self) -> ClaimSetStatus:
-        if self.expiration_time and self.expiration_time.timestamp() < datetime.now().timestamp():
+        # Per JWT RFC 7519 Section 4.1.4, the expiration time identifies the time
+        # "on or after which" the JWT must not be accepted. Use <= for inclusive check.
+        # https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.4
+        if (
+            self.expiration_time
+            and self.expiration_time.timestamp() <= datetime.now(timezone.utc).timestamp()
+        ):
             return ClaimSetStatus.EXPIRED
         if self.token_id is not None and self.subject is not None:
             return ClaimSetStatus.VALID

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/db/models.py

@@ -1607,7 +1607,7 @@ class PasswordResetToken(HasId):
     )
     user: Mapped["User"] = relationship("User", back_populates="password_reset_token")
     created_at: Mapped[datetime] = mapped_column(UtcTimeStamp, server_default=func.now())
-    expires_at: Mapped[Optional[datetime]] = mapped_column(UtcTimeStamp, nullable=False, index=True)
+    expires_at: Mapped[datetime] = mapped_column(UtcTimeStamp, nullable=False, index=True)
     __table_args__ = (dict(sqlite_autoincrement=True),)
 
 
@@ -1619,7 +1619,7 @@ class RefreshToken(HasId):
     )
     user: Mapped["User"] = relationship("User", back_populates="refresh_tokens")
     created_at: Mapped[datetime] = mapped_column(UtcTimeStamp, server_default=func.now())
-    expires_at: Mapped[Optional[datetime]] = mapped_column(UtcTimeStamp, nullable=False, index=True)
+    expires_at: Mapped[datetime] = mapped_column(UtcTimeStamp, nullable=False, index=True)
     __table_args__ = (dict(sqlite_autoincrement=True),)
 
 
@@ -1631,7 +1631,7 @@ class AccessToken(HasId):
     )
     user: Mapped["User"] = relationship("User", back_populates="access_tokens")
     created_at: Mapped[datetime] = mapped_column(UtcTimeStamp, server_default=func.now())
-    expires_at: Mapped[Optional[datetime]] = mapped_column(UtcTimeStamp, nullable=False, index=True)
+    expires_at: Mapped[datetime] = mapped_column(UtcTimeStamp, nullable=False, index=True)
     refresh_token_id: Mapped[int] = mapped_column(
         ForeignKey("refresh_tokens.id", ondelete="CASCADE"),
         index=True,

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/server/api/auth.py

@@ -22,6 +22,15 @@ class IsNotReadOnly(Authorization):
         return not info.context.read_only
 
 
+class IsNotViewer(Authorization):
+    message = "Viewers cannot perform this action"
+
+    def has_permission(self, source: Any, info: Info, **kwargs: Any) -> bool:
+        if not info.context.auth_enabled:
+            return True
+        return isinstance((user := info.context.user), PhoenixUser) and not user.is_viewer
+
+
 class IsLocked(BasePermission):
     """
     Permission class that restricts data-modifying operations when insufficient storage.

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/server/api/context.py

@@ -20,6 +20,7 @@ from phoenix.server.api.dataloaders import (
     AverageExperimentRepeatedRunGroupLatencyDataLoader,
     AverageExperimentRunLatencyDataLoader,
     CacheForDataLoaders,
+    DatasetDatasetSplitsDataLoader,
     DatasetExampleRevisionsDataLoader,
     DatasetExamplesAndVersionsByExperimentRunDataLoader,
     DatasetExampleSpansDataLoader,
@@ -101,6 +102,7 @@ class DataLoaders:
     dataset_example_revisions: DatasetExampleRevisionsDataLoader
     dataset_example_spans: DatasetExampleSpansDataLoader
     dataset_labels: DatasetLabelsDataLoader
+    dataset_dataset_splits: DatasetDatasetSplitsDataLoader
     dataset_examples_and_versions_by_experiment_run: (
         DatasetExamplesAndVersionsByExperimentRunDataLoader
     )

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/server/api/dataloaders/__init__.py

@@ -10,6 +10,7 @@ from .average_experiment_repeated_run_group_latency import (
     AverageExperimentRepeatedRunGroupLatencyDataLoader,
 )
 from .average_experiment_run_latency import AverageExperimentRunLatencyDataLoader
+from .dataset_dataset_splits import DatasetDatasetSplitsDataLoader
 from .dataset_example_revisions import DatasetExampleRevisionsDataLoader
 from .dataset_example_spans import DatasetExampleSpansDataLoader
 from .dataset_example_splits import DatasetExampleSplitsDataLoader
@@ -84,6 +85,7 @@ __all__ = [
     "AverageExperimentRepeatedRunGroupLatencyDataLoader",
     "AverageExperimentRunLatencyDataLoader",
     "CacheForDataLoaders",
+    "DatasetDatasetSplitsDataLoader",
     "DatasetExampleRevisionsDataLoader",
     "DatasetExampleSpansDataLoader",
     "DatasetExamplesAndVersionsByExperimentRunDataLoader",

arize_phoenix-12.5.0/src/phoenix/server/api/dataloaders/dataset_dataset_splits.py

@@ -0,0 +1,52 @@
+from sqlalchemy import select
+from strawberry.dataloader import DataLoader
+from typing_extensions import TypeAlias
+
+from phoenix.db import models
+from phoenix.server.types import DbSessionFactory
+
+DatasetID: TypeAlias = int
+Key: TypeAlias = DatasetID
+Result: TypeAlias = list[models.DatasetSplit]
+
+
+class DatasetDatasetSplitsDataLoader(DataLoader[Key, Result]):
+    def __init__(self, db: DbSessionFactory) -> None:
+        super().__init__(
+            load_fn=self._load_fn,
+        )
+        self._db = db
+
+    async def _load_fn(self, keys: list[Key]) -> list[Result]:
+        dataset_ids = keys
+        async with self._db() as session:
+            splits: dict[DatasetID, dict[int, models.DatasetSplit]] = {
+                dataset_id: {} for dataset_id in dataset_ids
+            }
+
+            async for dataset_id, split in await session.stream(
+                select(models.DatasetExample.dataset_id, models.DatasetSplit)
+                .select_from(models.DatasetSplit)
+                .join(
+                    models.DatasetSplitDatasetExample,
+                    onclause=(
+                        models.DatasetSplit.id == models.DatasetSplitDatasetExample.dataset_split_id
+                    ),
+                )
+                .join(
+                    models.DatasetExample,
+                    onclause=(
+                        models.DatasetSplitDatasetExample.dataset_example_id
+                        == models.DatasetExample.id
+                    ),
+                )
+                .where(models.DatasetExample.dataset_id.in_(dataset_ids))
+            ):
+                # Use dict to deduplicate splits by split.id
+                if dataset_id in splits:
+                    splits[dataset_id][split.id] = split
+
+            return [
+                sorted(splits.get(dataset_id, {}).values(), key=lambda x: x.name)
+                for dataset_id in keys
+            ]

arize_phoenix-12.5.0/src/phoenix/server/api/input_types/ProjectSessionSort.py

@@ -0,0 +1,189 @@
+from dataclasses import dataclass
+from enum import Enum, auto
+from typing import Any, Optional
+
+import strawberry
+from sqlalchemy import and_, desc, func, nulls_last, select
+from sqlalchemy.orm import InstrumentedAttribute
+from sqlalchemy.sql.expression import Select
+from strawberry import UNSET
+from typing_extensions import assert_never
+
+from phoenix.db import models
+from phoenix.db.helpers import truncate_name
+from phoenix.server.api.types.pagination import CursorSortColumnDataType
+from phoenix.server.api.types.SortDir import SortDir
+
+
+@strawberry.enum
+class ProjectSessionColumn(Enum):
+    startTime = auto()
+    endTime = auto()
+    tokenCountTotal = auto()
+    numTraces = auto()
+    costTotal = auto()
+
+    @property
+    def column_name(self) -> str:
+        return truncate_name(f"{self.name}_project_session_sort_column")
+
+    def as_orm_expression(self, joined_table: Optional[Any] = None) -> Any:
+        expr: Any
+        if self is ProjectSessionColumn.startTime:
+            expr = models.ProjectSession.start_time
+        elif self is ProjectSessionColumn.endTime:
+            expr = models.ProjectSession.end_time
+        elif self is ProjectSessionColumn.tokenCountTotal:
+            assert joined_table is not None
+            expr = joined_table.c.key
+        elif self is ProjectSessionColumn.numTraces:
+            assert joined_table is not None
+            expr = joined_table.c.key
+        elif self is ProjectSessionColumn.costTotal:
+            assert joined_table is not None
+            expr = joined_table.c.key
+        else:
+            assert_never(self)
+        return expr.label(self.column_name)
+
+    @property
+    def data_type(self) -> CursorSortColumnDataType:
+        if self is ProjectSessionColumn.tokenCountTotal or self is ProjectSessionColumn.numTraces:
+            return CursorSortColumnDataType.INT
+        if self is ProjectSessionColumn.startTime or self is ProjectSessionColumn.endTime:
+            return CursorSortColumnDataType.DATETIME
+        if self is ProjectSessionColumn.costTotal:
+            return CursorSortColumnDataType.FLOAT
+        assert_never(self)
+
+    def join_tables(self, stmt: Select[Any]) -> tuple[Select[Any], Any]:
+        """
+        If needed, joins tables required for the sort column.
+        """
+        if self is ProjectSessionColumn.tokenCountTotal:
+            sort_subq = (
+                select(
+                    models.Trace.project_session_rowid.label("id"),
+                    func.sum(models.Span.cumulative_llm_token_count_total).label("key"),
+                )
+                .join_from(models.Trace, models.Span)
+                .where(models.Span.parent_id.is_(None))
+                .group_by(models.Trace.project_session_rowid)
+            ).subquery()
+            stmt = stmt.join(sort_subq, models.ProjectSession.id == sort_subq.c.id)
+            return stmt, sort_subq
+        if self is ProjectSessionColumn.numTraces:
+            sort_subq = (
+                select(
+                    models.Trace.project_session_rowid.label("id"),
+                    func.count(models.Trace.id).label("key"),
+                ).group_by(models.Trace.project_session_rowid)
+            ).subquery()
+            stmt = stmt.join(sort_subq, models.ProjectSession.id == sort_subq.c.id)
+            return stmt, sort_subq
+        if self is ProjectSessionColumn.costTotal:
+            sort_subq = (
+                select(
+                    models.Trace.project_session_rowid.label("id"),
+                    func.sum(models.SpanCost.total_cost).label("key"),
+                )
+                .join_from(
+                    models.Trace,
+                    models.SpanCost,
+                    models.Trace.id == models.SpanCost.trace_rowid,
+                )
+                .group_by(models.Trace.project_session_rowid)
+            ).subquery()
+            stmt = stmt.join(sort_subq, models.ProjectSession.id == sort_subq.c.id)
+            return stmt, sort_subq
+        return stmt, None
+
+
+@strawberry.enum
+class ProjectSessionAnnoAttr(Enum):
+    score = "score"
+    label = "label"
+
+    @property
+    def column_name(self) -> str:
+        return f"{self.value}_anno_sort_column"
+
+    @property
+    def orm_expression(self) -> Any:
+        expr: InstrumentedAttribute[Any]
+        if self is ProjectSessionAnnoAttr.score:
+            expr = models.ProjectSessionAnnotation.score
+        elif self is ProjectSessionAnnoAttr.label:
+            expr = models.ProjectSessionAnnotation.label
+        else:
+            assert_never(self)
+        return expr.label(self.column_name)
+
+    @property
+    def data_type(self) -> CursorSortColumnDataType:
+        if self is ProjectSessionAnnoAttr.label:
+            return CursorSortColumnDataType.STRING
+        if self is ProjectSessionAnnoAttr.score:
+            return CursorSortColumnDataType.FLOAT
+        assert_never(self)
+
+
+@strawberry.input
+class ProjectSessionAnnoResultKey:
+    name: str
+    attr: ProjectSessionAnnoAttr
+
+
+@dataclass(frozen=True)
+class ProjectSessionSortConfig:
+    stmt: Select[Any]
+    orm_expression: Any
+    dir: SortDir
+    column_name: str
+    column_data_type: CursorSortColumnDataType
+
+
+@strawberry.input(description="The sort key and direction for ProjectSession connections.")
+class ProjectSessionSort:
+    col: Optional[ProjectSessionColumn] = UNSET
+    anno_result_key: Optional[ProjectSessionAnnoResultKey] = UNSET
+    dir: SortDir
+
+    def update_orm_expr(self, stmt: Select[Any]) -> ProjectSessionSortConfig:
+        if (col := self.col) and not self.anno_result_key:
+            stmt, joined_table = col.join_tables(stmt)
+            expr = col.as_orm_expression(joined_table)
+            stmt = stmt.add_columns(expr)
+            if self.dir == SortDir.desc:
+                expr = desc(expr)
+            return ProjectSessionSortConfig(
+                stmt=stmt.order_by(nulls_last(expr)),
+                orm_expression=col.as_orm_expression(joined_table),
+                dir=self.dir,
+                column_name=col.column_name,
+                column_data_type=col.data_type,
+            )
+        if (anno_result_key := self.anno_result_key) and not col:
+            anno_name = anno_result_key.name
+            anno_attr = anno_result_key.attr
+            expr = anno_result_key.attr.orm_expression
+            stmt = stmt.add_columns(expr)
+            if self.dir == SortDir.desc:
+                expr = desc(expr)
+            stmt = stmt.join(
+                models.ProjectSessionAnnotation,
+                onclause=and_(
+                    models.ProjectSessionAnnotation.project_session_id == models.ProjectSession.id,
+                    models.ProjectSessionAnnotation.name == anno_name,
+                ),
+            ).order_by(nulls_last(expr))
+            return ProjectSessionSortConfig(
+                stmt=stmt,
+                orm_expression=anno_result_key.attr.orm_expression,
+                dir=self.dir,
+                column_name=anno_attr.column_name,
+                column_data_type=anno_attr.data_type,
+            )
+        raise ValueError(
+            "Exactly one of `col` or `annoResultKey` must be specified on `ProjectSessionSort`."
+        )

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/server/api/input_types/SpanSort.py

@@ -11,6 +11,7 @@ from typing_extensions import assert_never
 
 import phoenix.trace.v1 as pb
 from phoenix.db import models
+from phoenix.db.helpers import truncate_name
 from phoenix.server.api.types.pagination import CursorSortColumnDataType
 from phoenix.server.api.types.SortDir import SortDir
 from phoenix.trace.schemas import SpanID
@@ -32,7 +33,7 @@ class SpanColumn(Enum):
 
     @property
     def column_name(self) -> str:
-        return f"{self.name}_span_sort_column"
+        return truncate_name(f"{self.name}_span_sort_column")
 
     def as_orm_expression(self, joined_table: Optional[Any] = None) -> Any:
         expr: Any

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/server/api/input_types/UserRoleInput.py

@@ -7,3 +7,4 @@ import strawberry
 class UserRoleInput(Enum):
     ADMIN = "ADMIN"
     MEMBER = "MEMBER"
+    VIEWER = "VIEWER"

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/server/api/mutations/annotation_config_mutations.py

@@ -23,7 +23,7 @@ from phoenix.db.types.annotation_configs import (
 from phoenix.db.types.annotation_configs import (
     FreeformAnnotationConfig as FreeformAnnotationConfigModel,
 )
-from phoenix.server.api.auth import IsNotReadOnly
+from phoenix.server.api.auth import IsNotReadOnly, IsNotViewer
 from phoenix.server.api.context import Context
 from phoenix.server.api.exceptions import BadRequest, Conflict, NotFound
 from phoenix.server.api.queries import Query
@@ -197,7 +197,7 @@ def _to_pydantic_freeform_annotation_config(
 
 @strawberry.type
 class AnnotationConfigMutationMixin:
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def create_annotation_config(
         self,
         info: Info[Context, None],
@@ -236,7 +236,7 @@ class AnnotationConfigMutationMixin:
             annotation_config=to_gql_annotation_config(annotation_config),
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def update_annotation_config(
         self,
         info: Info[Context, None],
@@ -285,7 +285,7 @@ class AnnotationConfigMutationMixin:
             annotation_config=to_gql_annotation_config(annotation_config),
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def delete_annotation_configs(
         self,
         info: Info[Context, None],
@@ -317,7 +317,7 @@ class AnnotationConfigMutationMixin:
             ],
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def add_annotation_config_to_project(
         self,
         info: Info[Context, None],
@@ -377,7 +377,7 @@ class AnnotationConfigMutationMixin:
                 project=Project(project_rowid=project_id),
             )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def remove_annotation_config_from_project(
         self,
         info: Info[Context, None],

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/server/api/mutations/api_key_mutations.py

@@ -1,5 +1,5 @@
 from datetime import datetime, timezone
-from typing import Optional
+from typing import Literal, Optional
 
 import strawberry
 from sqlalchemy import select
@@ -9,7 +9,7 @@ from strawberry.types import Info
 
 from phoenix.db import models
 from phoenix.db.models import UserRoleName
-from phoenix.server.api.auth import IsAdmin, IsLocked, IsNotReadOnly
+from phoenix.server.api.auth import IsAdmin, IsLocked, IsNotReadOnly, IsNotViewer
 from phoenix.server.api.context import Context
 from phoenix.server.api.exceptions import Unauthorized
 from phoenix.server.api.queries import Query
@@ -61,7 +61,7 @@ class DeleteApiKeyMutationPayload:
 
 @strawberry.type
 class ApiKeyMutationMixin:
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsAdmin, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsAdmin, IsLocked])  # type: ignore
     async def create_system_api_key(
         self, info: Info[Context, None], input: CreateApiKeyInput
     ) -> CreateSystemApiKeyMutationPayload:
@@ -113,12 +113,20 @@ class ApiKeyMutationMixin:
         except AttributeError:
             raise ValueError("User not found")
         issued_at = datetime.now(timezone.utc)
+        # Determine user role for API key
+        user_role: Literal["ADMIN", "MEMBER", "VIEWER"]
+        if user.is_admin:
+            user_role = "ADMIN"
+        elif user.is_viewer:
+            user_role = "VIEWER"
+        else:
+            user_role = "MEMBER"
         claims = ApiKeyClaims(
             subject=user.identity,
             issued_at=issued_at,
             expiration_time=input.expires_at or None,
             attributes=ApiKeyAttributes(
-                user_role="ADMIN" if user.is_admin else "MEMBER",
+                user_role=user_role,
                 name=input.name,
                 description=input.description,
             ),
@@ -137,7 +145,7 @@ class ApiKeyMutationMixin:
             query=Query(),
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsAdmin])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsAdmin])  # type: ignore
     async def delete_system_api_key(
         self, info: Info[Context, None], input: DeleteApiKeyInput
     ) -> DeleteApiKeyMutationPayload:

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/server/api/mutations/chat_mutations.py

@@ -30,7 +30,7 @@ from phoenix.db.helpers import (
     get_dataset_example_revisions,
     insert_experiment_with_examples_snapshot,
 )
-from phoenix.server.api.auth import IsLocked, IsNotReadOnly
+from phoenix.server.api.auth import IsLocked, IsNotReadOnly, IsNotViewer
 from phoenix.server.api.context import Context
 from phoenix.server.api.exceptions import BadRequest, CustomGraphQLError, NotFound
 from phoenix.server.api.helpers.dataset_helpers import get_dataset_example_output
@@ -131,7 +131,7 @@ class ChatCompletionOverDatasetMutationPayload:
 
 @strawberry.type
 class ChatCompletionMutationMixin:
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     @classmethod
     async def chat_completion_over_dataset(
         cls,
@@ -302,7 +302,7 @@ class ChatCompletionMutationMixin:
             payload.examples.append(example_payload)
         return payload
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     @classmethod
     async def chat_completion(
         cls, info: Info[Context, None], input: ChatCompletionInput

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/server/api/mutations/dataset_label_mutations.py

@@ -10,7 +10,7 @@ from strawberry.relay.types import GlobalID
 from strawberry.types import Info
 
 from phoenix.db import models
-from phoenix.server.api.auth import IsLocked, IsNotReadOnly
+from phoenix.server.api.auth import IsLocked, IsNotReadOnly, IsNotViewer
 from phoenix.server.api.context import Context
 from phoenix.server.api.exceptions import BadRequest, Conflict, NotFound
 from phoenix.server.api.queries import Query
@@ -78,7 +78,7 @@ class UnsetDatasetLabelsMutationPayload:
 
 @strawberry.type
 class DatasetLabelMutationMixin:
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def create_dataset_label(
         self,
         info: Info[Context, None],
@@ -100,7 +100,7 @@ class DatasetLabelMutationMixin:
             dataset_label=to_gql_dataset_label(dataset_label_orm)
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def update_dataset_label(
         self, info: Info[Context, None], input: UpdateDatasetLabelInput
     ) -> UpdateDatasetLabelMutationPayload:
@@ -133,7 +133,7 @@ class DatasetLabelMutationMixin:
             dataset_label=to_gql_dataset_label(dataset_label_orm)
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def delete_dataset_labels(
         self, info: Info[Context, None], input: DeleteDatasetLabelsInput
     ) -> DeleteDatasetLabelsMutationPayload:
@@ -166,7 +166,7 @@ class DatasetLabelMutationMixin:
             ]
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def set_dataset_labels(
         self, info: Info[Context, None], input: SetDatasetLabelsInput
     ) -> SetDatasetLabelsMutationPayload:
@@ -248,7 +248,7 @@ class DatasetLabelMutationMixin:
             query=Query(),
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def unset_dataset_labels(
         self, info: Info[Context, None], input: UnsetDatasetLabelsInput
     ) -> UnsetDatasetLabelsMutationPayload:

{arize_phoenix-12.4.0 → arize_phoenix-12.5.0}/src/phoenix/server/api/mutations/dataset_mutations.py

@@ -18,7 +18,7 @@ from strawberry.types import Info
 
 from phoenix.db import models
 from phoenix.db.helpers import get_eval_trace_ids_for_datasets, get_project_names_for_datasets
-from phoenix.server.api.auth import IsLocked, IsNotReadOnly
+from phoenix.server.api.auth import IsLocked, IsNotReadOnly, IsNotViewer
 from phoenix.server.api.context import Context
 from phoenix.server.api.exceptions import BadRequest, NotFound
 from phoenix.server.api.helpers.dataset_helpers import (
@@ -50,7 +50,7 @@ class DatasetMutationPayload:
 
 @strawberry.type
 class DatasetMutationMixin:
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def create_dataset(
         self,
         info: Info[Context, None],
@@ -74,7 +74,7 @@ class DatasetMutationMixin:
         info.context.event_queue.put(DatasetInsertEvent((dataset.id,)))
         return DatasetMutationPayload(dataset=to_gql_dataset(dataset))
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def patch_dataset(
         self,
         info: Info[Context, None],
@@ -103,7 +103,7 @@ class DatasetMutationMixin:
         info.context.event_queue.put(DatasetInsertEvent((dataset.id,)))
         return DatasetMutationPayload(dataset=to_gql_dataset(dataset))
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def add_spans_to_dataset(
         self,
         info: Info[Context, None],
@@ -223,7 +223,7 @@ class DatasetMutationMixin:
         info.context.event_queue.put(DatasetInsertEvent((dataset.id,)))
         return DatasetMutationPayload(dataset=to_gql_dataset(dataset))
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def add_examples_to_dataset(
         self, info: Info[Context, None], input: AddExamplesToDatasetInput
     ) -> DatasetMutationPayload:
@@ -350,7 +350,7 @@ class DatasetMutationMixin:
         info.context.event_queue.put(DatasetInsertEvent((dataset.id,)))
         return DatasetMutationPayload(dataset=to_gql_dataset(dataset))
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore
     async def delete_dataset(
         self,
         info: Info[Context, None],
@@ -381,7 +381,7 @@ class DatasetMutationMixin:
         info.context.event_queue.put(DatasetDeleteEvent((dataset.id,)))
         return DatasetMutationPayload(dataset=to_gql_dataset(dataset))
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def patch_dataset_examples(
         self,
         info: Info[Context, None],
@@ -474,7 +474,7 @@ class DatasetMutationMixin:
         info.context.event_queue.put(DatasetInsertEvent((dataset.id,)))
         return DatasetMutationPayload(dataset=to_gql_dataset(dataset))
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def delete_dataset_examples(
         self, info: Info[Context, None], input: DeleteDatasetExamplesInput
     ) -> DatasetMutationPayload: