open-webui/backend/open_webui
G30 5dff6489d2
fix: someone with Write access saving a shared prompt or tool no longer makes it private (#32493)
The prompt and tool editors resend every stored grant on Save, and the
update routes ran that whole list through filter_allowed_access_grants.
A collaborator without the public sharing permission therefore had the
owner's Public grant stripped, and the stripped list replaced the stored
one, so one Save made the prompt or tool private for everyone else.

Keep grants that are already stored and filter only the ones the save
adds, as the model update route has done since 754c4b576.
2026-10-16 03:20:45 +04:00
..
data refac: mv backend files to /open_webui dir 2024-09-04 16:54:48 +02:00
internal fix: non-English text is missed by searches and counted six times against size limits (#31615) 2026-09-30 19:19:29 +04:00
migrations refac 2026-10-14 18:49:51 +04:00
models refac 2026-10-16 02:46:20 +04:00
retrieval refac: normalise collection names when matching retrieval collections (#32435) 2026-10-15 00:11:01 +04:00
routers fix: someone with Write access saving a shared prompt or tool no longer makes it private (#32493) 2026-10-16 03:20:45 +04:00
socket refac 2026-10-16 01:43:50 +04:00
static refac 2026-09-06 17:27:30 -04:00
storage refac 2026-10-05 12:03:19 +04:00
tools refac 2026-10-14 23:21:22 +04:00
utils refac 2026-10-16 03:17:14 +04:00
__init__.py refac 2026-10-05 12:17:25 +04:00
alembic.ini fix: Alembic CLI commands from failing 2025-08-15 04:17:47 -04:00
config.py refac 2026-10-15 17:56:56 +04:00
constants.py fix: SSO login failures show the email/password error (#31629) 2026-09-30 19:07:49 +04:00
env.py refac 2026-10-01 03:31:20 +04:00
events.py refac 2026-10-08 14:30:07 +04:00
functions.py fix: pipes and tools get None instead of a file list when nothing is attached (#32380) 2026-10-14 12:18:55 +04:00
main.py refac 2026-10-16 02:46:20 +04:00
tasks.py refac 2026-09-21 08:59:39 -04:00