Classic298 fc9ad75164 fix: admins can still read and change other users' chats with ENABLE_ADMIN_CHAT_ACCESS off (#31416) ...

With ENABLE_ADMIN_CHAT_ACCESS turned off, opening another user's chat was refused, but through direct API requests an admin could still get the whole chat back in the reply to editing or deleting one of its messages, grant themselves read access in the chat's share settings, clone a chat someone shared privately with another user, or delete the chat. They could also send messages into it, attach it as context to their own chat, approve its tool calls, and list or stop its running replies. All of these are now refused for an admin on another user's chat, the same as opening it. With the setting on, admins keep full access as before.

Fixes #31413

2026-09-28 01:51:59 +04:00

..

analytics.py

fix: apply the group filter to the Analytics hourly chart (#30978)

2026-09-24 12:11:13 -04:00

audio.py

fix: keep the speech-to-text extension allowlist when the Audio settings are saved (#30208)

2026-09-19 17:36:38 -04:00

auths.py

refac

2026-09-24 12:10:30 -04:00

automations.py

refac

2026-09-21 08:59:39 -04:00

calendar.py

refac

2026-09-21 08:59:39 -04:00

channels.py

refac: sync channel room on member removal (#30446)

2026-09-23 23:43:20 -04:00

chats.py

fix: admins can still read and change other users' chats with ENABLE_ADMIN_CHAT_ACCESS off (#31416)

2026-09-28 01:51:59 +04:00

configs.py

fix: keep requested MCP OAuth scope when DCR response omits it (#30384)

2026-09-23 23:52:29 -04:00

evaluations.py

fix: load the leaderboard activity chart for model ids that contain a slash (#30456)

2026-09-23 23:32:42 -04:00

files.py

refac

2026-09-21 10:19:59 -04:00

folders.py

refac: folder file checks (#30442)

2026-09-23 23:36:15 -04:00

functions.py

fix: drop a deleted plugin's source from the content cache (#29983)

2026-09-13 20:21:40 -04:00

groups.py

refac

2026-06-29 05:47:21 -05:00

images.py

fix: detect the real image type of bare base64 generated images (#30359)

2026-09-22 11:35:59 -04:00

knowledge.py

refac

2026-09-21 10:19:59 -04:00

memories.py

refac

2026-09-16 00:34:24 -04:00

models.py

refac

2026-09-21 10:25:20 -04:00

notes.py

refac

2026-09-22 13:13:22 -04:00

notifications.py

refac

2026-07-27 19:39:36 -04:00

ollama.py

fix: model upload, download and unload ignore a connection's custom headers and auth type (#31490)

2026-09-28 01:48:26 +04:00

openai.py

refac

2026-09-27 23:29:38 +04:00

pipelines.py

perf: skip pipeline filter session setup when no filters exist (#29146)

2026-08-28 12:22:23 -04:00

prompts.py

refac

2026-08-31 00:39:16 -04:00

retrieval.py

feat: add a Tavily search depth setting (#31308)

2026-09-27 23:15:09 +04:00

scim.py

refac

2026-09-17 20:11:05 -04:00

skills.py

perf: stop scanning every skill on each listing and chat turn (#28798)

2026-08-19 11:07:33 -07:00

tasks.py

refac

2026-08-11 01:15:05 -06:00

terminals.py

refac

2026-09-21 10:30:53 -04:00

tools.py

refac

2026-09-21 08:31:27 -04:00

users.py

refac

2026-09-07 14:46:52 -04:00

utils.py

refac

2026-09-06 17:27:30 -04:00