This commit is contained in:
Timothy Jaeryang Baek
2026-03-01 13:54:44 -06:00
parent 259d5ca596
commit 93bab8d822
3 changed files with 14 additions and 12 deletions
-2
View File
@@ -2592,8 +2592,6 @@ async def query_collection_handler(
) )
elif collection_name.startswith("file-"): elif collection_name.startswith("file-"):
file_id = collection_name[len("file-") :] file_id = collection_name[len("file-") :]
file = Files.get_file_by_id(file_id)
if file and file.user_id != user.id:
if not has_access_to_file( if not has_access_to_file(
file_id=file_id, file_id=file_id,
access_type="read", access_type="read",
+1 -1
View File
@@ -804,7 +804,7 @@ def get_event_emitter(request_info, update_db=True):
Chats.add_message_status_to_chat_by_id_and_message_id, Chats.add_message_status_to_chat_by_id_and_message_id,
request_info["chat_id"], request_info["chat_id"],
request_info["message_id"], request_info["message_id"],
status_data, event_data.get("data", {}),
) )
elif event_type == "message": elif event_type == "message":
@@ -32,6 +32,10 @@ def has_access_to_file(
if not file: if not file:
return False return False
# Direct ownership
if file.user_id == user.id:
return True
# Check if the file is associated with any knowledge bases the user has access to # Check if the file is associated with any knowledge bases the user has access to
knowledge_bases = Knowledges.get_knowledges_by_file_id(file_id, db=db) knowledge_bases = Knowledges.get_knowledges_by_file_id(file_id, db=db)
user_group_ids = { user_group_ids = {