Classic298 fc9ad75164 fix: admins can still read and change other users' chats with ENABLE_ADMIN_CHAT_ACCESS off (#31416) ... With ENABLE_ADMIN_CHAT_ACCESS turned off, opening another user's chat was refused, but through direct API requests an admin could still get the whole chat back in the reply to editing or deleting one of its messages, grant themselves read access in the chat's share settings, clone a chat someone shared privately with another user, or delete the chat. They could also send messages into it, attach it as context to their own chat, approve its tool calls, and list or stop its running replies. All of these are now refused for an admin on another user's chat, the same as opening it. With the setting on, admins keep full access as before. Fixes #31413		2026-09-28 01:51:59 +04:00
..
access_control	chore: format	2026-09-21 11:35:30 -04:00
images	fix: show ComfyUI images saved by the Save Image (Advanced) node (#30420)	2026-09-23 23:54:58 -04:00
mcp	refac	2026-09-12 14:57:22 -04:00
telemetry	refac(telemetry): drop deprecated semconv SpanAttributes subclass (#25784)	2026-06-29 02:05:34 -05:00
actions.py	fix: enforce action availability and model access on the chat action route (#27243)	2026-07-23 12:23:05 -04:00
anthropic.py	fix: Anthropic API streams report a failed response as a finished one (#31405)	2026-09-27 23:20:50 +04:00
asgi_middleware.py	refac	2026-08-24 18:29:36 -04:00
ask_user.py	fix: a rejected ask_user call ending the turn with no reply (#29252)	2026-08-31 00:17:21 -04:00
audit.py	perf: build debug log messages lazily so disabled debug logs cost nothing (#27834)	2026-07-31 19:09:01 -05:00
auth.py	refac	2026-09-19 17:54:09 -04:00
automations.py	fix: load models before resolving automation model defaults (#30379)	2026-09-23 23:51:29 -04:00
calendar.py	fix: correct recurrence rule parsing for schedules and calendar events (#29262)	2026-09-21 08:44:13 -04:00
channels.py	refac	2026-03-17 17:58:01 -05:00
chat.py	fix: keep the model system prompt on Ollama tool-call follow-ups (#30375)	2026-09-22 16:47:20 -04:00
chat_fork.py	refac	2026-07-23 02:54:56 -04:00
chat_id.py	refac	2026-07-26 21:12:14 -04:00
chat_variables.py	perf: stabilize the model registry signature across workers (#29264)	2026-08-30 16:12:31 -04:00
code_interpreter.py	refac	2026-07-31 17:41:14 -04:00
context_compaction.py	refac	2026-08-23 13:36:53 -04:00
embeddings.py	refac: modernize type annotations (PEP 604 / PEP 585)	2026-05-12 17:10:15 +09:00
files.py	refac(images): request an unencoded body when fetching remote chat images (#29623)	2026-09-21 08:53:06 -04:00
filter.py	refac	2026-08-31 01:29:36 -04:00
groups.py	refac: modernize type annotations (PEP 604 / PEP 585)	2026-05-12 17:10:15 +09:00
headers.py	refac	2026-09-27 23:29:38 +04:00
json_codec.py	perf: write task payloads to Redis as bytes (#28833)	2026-08-20 12:58:52 -07:00
json_response.py	perf: optional orjson JSON codec behind ENABLE_ORJSON (#27583)	2026-07-27 03:45:37 -04:00
logger.py	perf: stop formatting every exported log record twice under OTEL log export (#27840)	2026-08-10 23:13:52 -06:00
memory.py	fix: stop the background memory review when memory is switched off (#30309)	2026-09-21 11:22:21 -04:00
middleware.py	refac	2026-09-28 00:11:04 +04:00
misc.py	fix: chats keep failing on Anthropic and Bedrock after a tool call is saved incorrectly (#31431)	2026-09-26 07:19:00 +04:00
model_ids.py	refac	2026-07-26 23:09:22 -04:00
models.py	fix: keep arena model access after editing it in Settings > Models (#31309)	2026-09-27 23:14:47 +04:00
notifications.py	fix: sanitize user-typed notification target ids the same way generated ones are (#29947)	2026-09-12 13:50:19 -05:00
oauth.py	fix: skip blocked OAuth groups when auto-creating groups (#31316)	2026-09-25 00:08:01 -04:00
payload.py	fix: max_tokens sent through the API is ignored for Ollama models (#31437)	2026-09-26 07:18:43 +04:00
plugin.py	perf: build info log messages lazily so raising the log level actually saves work (#27837)	2026-08-02 15:39:10 -05:00
rate_limit.py	fix: stop the sign-in rate limiter blocking the loop and leaking memory (#29977)	2026-09-13 20:28:41 -05:00
recurrence.py	fix: evaluate automation schedules on Windows with PostgreSQL (#30424)	2026-09-23 08:47:04 -05:00
redis.py	fix: refresh an expiring OAuth token once across workers and replicas (#30450)	2026-09-23 23:33:09 -04:00
response.py	refac	2026-08-17 00:57:57 -07:00
sanitize.py	refac	2026-03-17 17:58:01 -05:00
security_headers.py	refac	2026-08-24 18:29:36 -04:00
session_pool.py	fix: long streamed lines no longer abort the response (#28114)	2026-08-25 12:16:37 -04:00
skills.py	chore: format	2026-09-21 11:35:30 -04:00
subagents.py	refac: check the owner's role before continuing a chat after a subagent finishes (#31451)	2026-09-27 22:59:11 +04:00
task.py	refac	2026-06-19 00:16:06 +02:00
terminals.py	fix: load terminal AGENTS.md on Windows Open Terminal hosts (#31342)	2026-09-25 00:00:59 -04:00
timers.py	fix: failed timer leaves a blank, unfinished reply in the chat (#31483)	2026-09-27 22:56:20 +04:00
tool_approval.py	fix: admins can still read and change other users' chats with ENABLE_ADMIN_CHAT_ACCESS off (#31416)	2026-09-28 01:51:59 +04:00
tools.py	fix: stop injecting memories and memory tools when memory is switched off (#30228)	2026-09-21 01:00:08 -04:00
validate.py	refac	2026-09-15 22:47:03 -04:00
valves.py	refac	2026-07-31 17:41:14 -04:00
webhook.py	perf: build debug log messages lazily so disabled debug logs cost nothing (#27834)	2026-07-31 19:09:01 -05:00