Update Local Permission Assignments

qwen3-tts-backend/db/crud.py

@@ -30,13 +30,15 @@ def create_user_by_admin(
     username: str,
     email: str,
     hashed_password: str,
-    is_superuser: bool = False
+    is_superuser: bool = False,
+    can_use_local_model: bool = False
 ) -> User:
     user = User(
         username=username,
         email=email,
         hashed_password=hashed_password,
-        is_superuser=is_superuser
+        is_superuser=is_superuser,
+        can_use_local_model=can_use_local_model
     )
     db.add(user)
     db.commit()
@@ -58,7 +60,8 @@ def update_user(
     email: Optional[str] = None,
     hashed_password: Optional[str] = None,
     is_active: Optional[bool] = None,
-    is_superuser: Optional[bool] = None
+    is_superuser: Optional[bool] = None,
+    can_use_local_model: Optional[bool] = None
 ) -> Optional[User]:
     user = get_user_by_id(db, user_id)
     if not user:
@@ -74,6 +77,8 @@ def update_user(
         user.is_active = is_active
     if is_superuser is not None:
         user.is_superuser = is_superuser
+    if can_use_local_model is not None:
+        user.can_use_local_model = can_use_local_model
 
     user.updated_at = datetime.utcnow()
     db.commit()
@@ -264,8 +269,5 @@ def update_system_setting(db: Session, key: str, value: dict) -> SystemSettings:
     db.refresh(setting)
     return setting
 
-def is_local_model_enabled(db: Session) -> bool:
-    setting = get_system_setting(db, "local_model_enabled")
-    if not setting:
-        return False
-    return setting.get("enabled", False)
+def can_user_use_local_model(user: User) -> bool:
+    return user.is_superuser or user.can_use_local_model

qwen3-tts-backend/db/migrate_add_local_permission.py

@@ -0,0 +1,17 @@
+from sqlalchemy import create_engine, text
+from core.config import settings
+
+def migrate():
+    engine = create_engine(settings.DATABASE_URL)
+    with engine.connect() as conn:
+        conn.execute(text(
+            "ALTER TABLE users ADD COLUMN can_use_local_model BOOLEAN DEFAULT 0 NOT NULL"
+        ))
+        conn.execute(text(
+            "UPDATE users SET can_use_local_model = 1 WHERE is_superuser = 1"
+        ))
+        conn.commit()
+    print("Migration completed: Added can_use_local_model column")
+
+if __name__ == "__main__":
+    migrate()

qwen3-tts-backend/db/models.py

@@ -21,6 +21,7 @@ class User(Base):
     is_active = Column(Boolean, default=True, nullable=False)
     is_superuser = Column(Boolean, default=False, nullable=False)
     aliyun_api_key = Column(Text, nullable=True)
+    can_use_local_model = Column(Boolean, default=False, nullable=False)
     user_preferences = Column(JSON, nullable=True, default=lambda: {"default_backend": "aliyun", "onboarding_completed": False})
     created_at = Column(DateTime, default=datetime.utcnow, nullable=False)
     updated_at = Column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow, nullable=False)