Files
open-webui-ai4me/backend
Classic298 2054ee0b73 fix: enforce ownership check on user-memory collection queries (#22109)
* fix: enforce ownership check on user-memory collection queries

fix: enforce ownership check on user-memory collection queries

Prevent authenticated users from querying other users' memory
collections via the /query/doc and /query/collection endpoints.
A new _validate_collection_access helper rejects requests for
user-memory-{UUID} collections where the UUID does not match
the requesting user. Admins bypass the check.

* Update retrieval.py

* Update retrieval.py
2026-03-01 15:03:37 -05:00
..
2024-09-06 04:59:20 +02:00
2025-09-12 14:09:32 +08:00
2026-02-12 16:54:32 -06:00
2026-02-12 16:54:32 -06:00
2025-06-27 15:46:38 +04:00
2025-10-07 16:20:27 -05:00