feat: add interface user permission (#20424)

* feat: add interface user permission

Adds admin configurable user / group permissions for the interface settings section

* rename

backend/open_webui/config.py

@@ -1471,6 +1471,11 @@ USER_PERMISSIONS_FEATURES_API_KEYS = (
 )
 
 
+USER_PERMISSIONS_SETTINGS_INTERFACE = (
+    os.environ.get("USER_PERMISSIONS_SETTINGS_INTERFACE", "True").lower() == "true"
+)
+
+
 DEFAULT_USER_PERMISSIONS = {
     "workspace": {
         "models": USER_PERMISSIONS_WORKSPACE_MODELS_ACCESS,
@@ -1529,6 +1534,9 @@ DEFAULT_USER_PERMISSIONS = {
         "image_generation": USER_PERMISSIONS_FEATURES_IMAGE_GENERATION,
         "code_interpreter": USER_PERMISSIONS_FEATURES_CODE_INTERPRETER,
     },
+    "settings": {
+        "interface": USER_PERMISSIONS_SETTINGS_INTERFACE,
+    },
 }
 
 USER_PERMISSIONS = PersistentConfig(

backend/open_webui/routers/users.py

@@ -227,11 +227,16 @@ class FeaturesPermissions(BaseModel):
     code_interpreter: bool = True
 
 
+class SettingsPermissions(BaseModel):
+    interface: bool = True
+
+
 class UserPermissions(BaseModel):
     workspace: WorkspacePermissions
     sharing: SharingPermissions
     chat: ChatPermissions
     features: FeaturesPermissions
+    settings: SettingsPermissions
 
 
 @router.get("/default/permissions", response_model=UserPermissions)
@@ -249,6 +254,9 @@ async def get_default_user_permissions(request: Request, user=Depends(get_admin_
         "features": FeaturesPermissions(
             **request.app.state.config.USER_PERMISSIONS.get("features", {})
         ),
+        "settings": SettingsPermissions(
+            **request.app.state.config.USER_PERMISSIONS.get("settings", {})
+        ),
     }