From 1923f7710a77bf626299ec7cbc93f1342ad927f8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=85=AC=E6=98=8E?=
 <83812544+Ed1s0nZ@users.noreply.github.com>
Date: Fri, 17 Jul 2026 17:08:27 +0800
Subject: [PATCH] Add files via upload

---
 internal/security/rbac_middleware.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/internal/security/rbac_middleware.go b/internal/security/rbac_middleware.go
index 6ddd216a..c5b5029e 100644
--- a/internal/security/rbac_middleware.go
+++ b/internal/security/rbac_middleware.go
@@ -151,6 +151,8 @@ func permissionForRequest(method, fullPath string) string {
 		return crudPermission(method, "knowledge")
 	case strings.HasPrefix(path, "/vulnerabilities"):
 		return crudPermission(method, "vulnerability")
+	case path == "/assets/batch-delete", path == "/assets/merge":
+		return "asset:delete"
 	case strings.HasPrefix(path, "/assets"):
 		return crudPermission(method, "asset")
 	case strings.HasPrefix(path, "/vulnerability-alerts"):