Commit graph

615 commits

Author SHA1 Message Date
Timothy Jaeryang Baek
64fa26bd28 refac 2026-02-13 14:48:10 -06:00
Timothy Jaeryang Baek
2487c84f1f refac: styling 2026-02-13 14:47:00 -06:00
Timothy Jaeryang Baek
163211a367 refac: styling 2026-02-13 14:43:06 -06:00
Timothy Jaeryang Baek
f027a01ab2 fix: direct model access control 2026-02-13 14:39:01 -06:00
Timothy Jaeryang Baek
df6e38039f refac 2026-02-13 13:29:22 -06:00
Classic298
73776d54b8
fix: enforce public sharing permission checks across all resource types (#21358)
The sharePublic prop in editor components (Knowledge, Tools, Skills,
Prompts, Models) incorrectly included an "|| edit" / "|| write_access"
condition, allowing users with write access to see and use the "Public"
sharing option regardless of their actual public sharing permission.
Additionally, all backend access/update endpoints only verified write
authorization but did not check the corresponding sharing.public_*
permission, allowing direct API calls to bypass frontend restrictions
entirely.
Frontend: removed the edit/write_access bypass from sharePublic in all
five editor components so visibility is gated solely by the user's
sharing.public_* permission or admin role.
Backend: added has_public_read_access_grant checks to the access/update
endpoints in knowledge.py, tools.py, prompts.py, skills.py, models.py,
and notes.py. Public grants are silently stripped when the user lacks
the corresponding permission.
Fixes #21356
2026-02-13 11:22:32 -06:00
G30
4d5b7b3014
fix: resolve knowledge tooltip z-index issue in model edit page (#21375) 2026-02-13 11:18:35 -06:00
Timothy Jaeryang Baek
5297dceb2a chore: format 2026-02-12 17:36:19 -06:00
Timothy Jaeryang Baek
f7af3f010e refac 2026-02-12 17:27:38 -06:00
Timothy Jaeryang Baek
0e64b31adb refac 2026-02-12 17:17:45 -06:00
Timothy Jaeryang Baek
2a11175f22 chore: format 2026-02-12 16:13:48 -06:00
Timothy Jaeryang Baek
97331bf11d refac 2026-02-11 17:26:25 -06:00
Timothy Jaeryang Baek
f376d4f378 chore: format 2026-02-11 16:24:11 -06:00
Timothy Jaeryang Baek
e5035ea31e refac 2026-02-11 15:55:23 -06:00
Timothy Jaeryang Baek
c8cbdc8f7f refac 2026-02-11 15:24:12 -06:00
Timothy Jaeryang Baek
46aa54b7dc refac 2026-02-11 14:35:45 -06:00
Timothy Jaeryang Baek
1973115678 feat: skills frontend 2026-02-11 14:22:26 -06:00
Timothy Jaeryang Baek
4aedfdc547 refac 2026-02-10 15:47:21 -06:00
Timothy Jaeryang Baek
e3a8257690 refac 2026-02-10 15:41:11 -06:00
Timothy Jaeryang Baek
c259c87806 refac 2026-02-10 15:30:16 -06:00
Timothy Jaeryang Baek
0044902c08 refac 2026-02-10 15:15:17 -06:00
Timothy Jaeryang Baek
c2f5cb542e refac 2026-02-09 14:03:35 -06:00
Timothy Jaeryang Baek
1034b74abd refac 2026-02-09 13:48:48 -06:00
Tim Baek
48a0abb40f
Merge pull request #21277 from open-webui/acl
refac: acl
2026-02-09 13:34:36 -06:00
Timothy Jaeryang Baek
3c7f9aa6a4 refac 2026-02-09 13:28:21 -06:00
Timothy Jaeryang Baek
3ae44d11a5 refac 2026-02-08 22:37:13 -06:00
Tim Baek
c3fa0f30fe refac 2026-02-08 06:45:01 +04:00
Timothy Jaeryang Baek
a1ea854b38 refac 2026-02-04 00:08:46 -06:00
Timothy Jaeryang Baek
afc56b9746 refac 2026-02-03 16:34:29 -06:00
Timothy Jaeryang Baek
0a61666197 refac 2026-02-03 16:33:12 -06:00
Timothy Jaeryang Baek
e5dbfc420d refac 2026-01-31 17:03:24 -06:00
Timothy Jaeryang Baek
ab5dfbda54 refac 2026-01-30 11:12:54 -05:00
Classic298
2c12278444
perf: Debounce various Database Endpoints for less Database Queries and better Backend performance (#20982)
* Update KnowledgeSelector.svelte

* Update KnowledgeSelector.svelte

* Update Users.svelte

* Update MemberSelector.svelte

* Update MemberSelector.svelte

* Update Knowledge.svelte

* Update Knowledge.svelte

* Update Notes.svelte

* Update Knowledge.svelte

* Update Prompts.svelte

* Update Tools.svelte

* Update Tools.svelte

* Update Prompts.svelte

* Update Prompts.svelte

* Update Prompts.svelte

* Update Functions.svelte

* Update UserList.svelte

* Update Functions.svelte

* Update Prompts.svelte

* Update UserList.svelte
2026-01-28 00:33:23 +04:00
Timothy Jaeryang Baek
fa859de460 refac 2026-01-27 23:21:31 +04:00
Timothy Jaeryang Baek
36766f157d refac: prompts pagination 2026-01-27 23:01:56 +04:00
Timothy Jaeryang Baek
10ba2accf7 refac 2026-01-26 16:18:49 +04:00
Timothy Jaeryang Baek
4c8d4e6dbd enh: prompt tags 2026-01-26 16:11:10 +04:00
Timothy Jaeryang Baek
f199c486a2 refac 2026-01-24 04:29:56 +04:00
Timothy Jaeryang Baek
1f205a8441 refac 2026-01-24 04:19:51 +04:00
Timothy Jaeryang Baek
b1d5b3b28e refac 2026-01-24 04:17:11 +04:00
Timothy Jaeryang Baek
32810b4152 refac 2026-01-24 04:13:19 +04:00
Timothy Jaeryang Baek
b7e9992d78 refac 2026-01-24 03:25:29 +04:00
Timothy Jaeryang Baek
6c76983999 refac 2026-01-24 03:21:47 +04:00
Timothy Jaeryang Baek
8bf46dcc5d refac 2026-01-24 03:16:34 +04:00
Timothy Jaeryang Baek
5510fa178e refac 2026-01-24 03:10:29 +04:00
Timothy Jaeryang Baek
5ad593e465 refac: prompt endpoints 2026-01-24 03:08:48 +04:00
Timothy Jaeryang Baek
44da9c6523 refac 2026-01-24 02:57:08 +04:00
Timothy Jaeryang Baek
6ab7d54982 refac 2026-01-24 02:51:44 +04:00
Timothy Jaeryang Baek
0c79a566ac feat: prompt history frontend 2026-01-24 02:40:17 +04:00
Timothy Jaeryang Baek
78f856e204 enh: quick prompt copy 2026-01-23 16:40:11 +04:00