From 01d94d6084f1a54331ca014143dd3e3d7bd1802e Mon Sep 17 00:00:00 2001
From: wxg0103 <727495428@qq.com>
Date: Wed, 2 Sep 2026 10:21:15 +0800
Subject: [PATCH] chore: import Application model in file.py and clean up
 permission checks

---
 apps/oss/views/file.py | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/apps/oss/views/file.py b/apps/oss/views/file.py
index ac024344bbe..c9e65e32b43 100644
--- a/apps/oss/views/file.py
+++ b/apps/oss/views/file.py
@@ -1,5 +1,5 @@
 # coding=utf-8
-from application.models import Chat
+from application.models import Chat, Application
 from maxkb.const import CONFIG
 from common.auth import AllTokenAuth, TokenAuth
 from common.auth.authentication import has_permissions
@@ -60,11 +60,6 @@ def post(self, request: Request):
         if request.user is None or is_chat_path:
             if source_type != FileSourceType.CHAT.value:
                 raise AppUnauthorizedFailed(403, _("No permission"))
-            # 聊天文件必须归属于调用者所在应用下的会话
-            if source_type == FileSourceType.CHAT.value:
-                chat = QuerySet(Chat).filter(id=source_id, application_id=request.auth.application_id).first()
-                if chat is None:
-                    raise AppUnauthorizedFailed(403, _("No permission"))
         return result.success(
             FileSerializer(
                 data={