From d4d04dca0da49b169ce745a2de0efe688a7cad5e Mon Sep 17 00:00:00 2001 From: G30 <50341825+silentoplayz@users.noreply.github.com> Date: Wed, 30 Sep 2026 11:59:11 -0400 Subject: [PATCH] fix: keep a cloned chat in a shared folder the user can write to (#31370) --- backend/open_webui/models/chats.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/backend/open_webui/models/chats.py b/backend/open_webui/models/chats.py index c5620f0cfe..76431db97f 100644 --- a/backend/open_webui/models/chats.py +++ b/backend/open_webui/models/chats.py @@ -660,11 +660,13 @@ class ChatTable: db: AsyncSession | None = None, ) -> list[ChatModel]: async with get_async_db_context(db) as session: + from open_webui.utils.access_control.folders import has_folder_write_access + # Validate folder_id references — clear any that don't exist folder_ids = {f.folder_id for f in chat_import_forms if f.folder_id} existing = set() for fid in folder_ids: - if await Folders.get_folder_by_id_and_user_id(fid, user_id, db=session): + if await has_folder_write_access(user_id, fid, db=session): existing.add(fid) cleared = 0