scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-09-19 00:03:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
16272 commits 2 branches 170 tags 1.4 GiB
Commit graph

82 commits

Author SHA1 Message Date
Timothy Jaeryang Baek
8507e5eb0d refac: include black 2026-03-24 17:18:52 -05:00
Timothy Jaeryang Baek
4c8615f01c refac 2026-03-21 17:45:36 -05:00
Timothy Jaeryang Baek
e53152123f refac 2026-03-15 21:54:35 -05:00
Timothy Jaeryang Baek
07e650c787 refac 2026-03-15 21:29:56 -05:00
Timothy Jaeryang Baek
acb2147024 refac 2026-02-25 13:53:08 -06:00
Timothy Jaeryang Baek
3d99de6771 enh: access grant level perms 2026-02-23 15:49:05 -06:00
G30
a8a3098782
fix(ui): apply select-none to remaining dropdown menus globally to prevent text highlighting (#21763) 2026-02-23 01:22:02 -06:00
Classic298
5b9efeef4d
fix(a11y): add aria-labels and structural elements to workspace components (#21719) 2026-02-22 15:24:33 -06:00
Timothy Jaeryang Baek
64fa26bd28 refac 2026-02-13 14:48:10 -06:00
Timothy Jaeryang Baek
2487c84f1f refac: styling 2026-02-13 14:47:00 -06:00
Classic298
73776d54b8
fix: enforce public sharing permission checks across all resource types (#21358) 
The sharePublic prop in editor components (Knowledge, Tools, Skills,
Prompts, Models) incorrectly included an "|| edit" / "|| write_access"
condition, allowing users with write access to see and use the "Public"
sharing option regardless of their actual public sharing permission.
Additionally, all backend access/update endpoints only verified write
authorization but did not check the corresponding sharing.public_*
permission, allowing direct API calls to bypass frontend restrictions
entirely.
Frontend: removed the edit/write_access bypass from sharePublic in all
five editor components so visibility is gated solely by the user's
sharing.public_* permission or admin role.
Backend: added has_public_read_access_grant checks to the access/update
endpoints in knowledge.py, tools.py, prompts.py, skills.py, models.py,
and notes.py. Public grants are silently stripped when the user lacks
the corresponding permission.
Fixes #21356
 2026-02-13 11:22:32 -06:00
Timothy Jaeryang Baek
e3a8257690 refac 2026-02-10 15:41:11 -06:00
Timothy Jaeryang Baek
3c7f9aa6a4 refac 2026-02-09 13:28:21 -06:00
Timothy Jaeryang Baek
3ebb3e2143 refac: styling 2025-11-30 03:56:12 -05:00
Timothy Jaeryang Baek
f69e37a850 feat/enh: user sharing perms 2025-11-20 18:32:34 -05:00
Classic298
b4bc71d1bd
feat: add granular import/export permissions for workspace items (#19242) 
* feat: add granular import/export permissions for workspace items (#55)

Co-authored-by: Claude <noreply@anthropic.com>

* Fix permissions toggles not saving in EditGroupModal (#58)

Co-authored-by: Claude <noreply@anthropic.com>

* Fix permissions toggles not saving in EditGroupModal (#59)

Co-authored-by: Claude <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>
 2025-11-17 18:25:23 -05:00
Timothy Jaeryang Baek
a743b16728 refac: tools 2025-10-05 02:03:57 -05:00
Timothy Jaeryang Baek
e5daec32ba refac 2025-09-24 17:16:07 -05:00
Tim Jaeryang Baek
3d2f7e3143
Merge pull request #17715 from ShirasawaSama/revert-17498-patch-19 
Revert "feat: Dynamically load CodeEditor.svelte to improve first-screen loading speed (-1MB)"
 2025-09-24 15:40:08 -05:00
Timothy Jaeryang Baek
1df5f1f9f6 revert: code editor dynamic import 2025-09-24 15:39:55 -05:00
Shirasawa
6614c73b6c
Revert "feat: Dynamically load CodeEditor.svelte to improve first-screen loading speed (-1MB)" 2025-09-25 00:10:01 +08:00
Shirasawa
001775d6c3 feat: Dynamically load CodeEditor to improve first-screen loading speed 2025-09-17 07:08:39 +00:00
Timothy Jaeryang Baek
596be451ec refac: styling 2025-09-15 14:28:16 -05:00
Timothy Jaeryang Baek
ef56b14636 refac: styling 2025-09-13 02:58:10 +04:00
Timothy Jaeryang Baek
884282c4ed refac: styling 2025-06-10 13:57:13 +04:00
Timothy Jaeryang Baek
85a384fab5 enh: load tool by url 2025-05-29 02:08:54 +04:00
Timothy Jaeryang Baek
881d81d87f refac: default tool calling behaviour 2025-04-12 17:26:35 -07:00
Timothy Jaeryang Baek
db8780fd9c refac: default tool boilerplate 2025-04-12 17:16:27 -07:00
Timothy Jaeryang Baek
59dd798156 refac/security: set ac to private by default 2025-04-11 14:46:02 -07:00
Timothy Jaeryang Baek
580965df17 feat: public sharing permissions 
Co-Authored-By: Taylor Wilsdon <6508528+taylorwilsdon@users.noreply.github.com>
 2025-03-31 17:28:25 -07:00
Silentoplayz
94c025c6d7 Update ToolkitEditor.svelte 
fix
 2025-03-04 17:46:24 -05:00
Silentoplayz
11967a780d Share fix 
Fix
 2025-02-25 17:05:05 -05:00
Timothy Jaeryang Baek
e06111a362 refac 2025-02-24 23:21:03 -08:00
Timothy Jaeryang Baek
8f3fcdcf5c refac 2025-02-22 02:00:06 -08:00
Timothy Jaeryang Baek
667d26ca12 refac 2025-02-22 01:16:58 -08:00
Timothy Jaeryang Baek
fd8998a38f refac 2025-02-15 19:50:40 -08:00
Timothy Jaeryang Baek
e3fa48b6ce chore: tailwind v4 migration 2025-02-15 19:27:25 -08:00
Timothy Jaeryang Baek
45f4bc18f8 refac: access controls 2025-01-20 23:20:47 -08:00
Timothy Jaeryang Baek
0edd4c2263 refac: wording share -> access 2024-11-17 16:13:59 -08:00
Timothy Jaeryang Baek
fbdda55564 fix: styling 2024-11-17 02:58:24 -08:00
Timothy Jaeryang Baek
79fbab7341 refac 2024-11-16 21:00:20 -08:00
Timothy Jaeryang Baek
41bad9abcb refac: access control 2024-11-16 20:47:45 -08:00
Timothy Jaeryang Baek
9dae7d0572 refac: models 2024-11-15 18:21:41 -08:00
Timothy Jaeryang Baek
ee05455155 refac 2024-11-12 15:46:44 -08:00
Timothy J. Baek
47e377967e refac: styling 2024-10-21 00:05:27 -07:00
Timothy J. Baek
b529212a2d refac: styling 2024-10-20 18:35:19 -07:00
Timothy J. Baek
b38ed4221a refac: styling 2024-10-20 18:31:24 -07:00
Timothy J. Baek
254c6ca709 refac: tools & functions styling 2024-10-20 18:24:50 -07:00
Timothy J. Baek
913620ff0c refac 2024-10-06 12:07:45 -07:00
Timothy J. Baek
dc2e75017d refac 2024-10-05 20:16:46 -07:00