Classic298 2054ee0b73 fix: enforce ownership check on user-memory collection queries (#22109) ...

* fix: enforce ownership check on user-memory collection queries

fix: enforce ownership check on user-memory collection queries

Prevent authenticated users from querying other users' memory
collections via the /query/doc and /query/collection endpoints.
A new _validate_collection_access helper rejects requests for
user-memory-{UUID} collections where the UUID does not match
the requesting user. Admins bypass the check.

* Update retrieval.py

* Update retrieval.py

2026-03-01 15:03:37 -05:00

..

data

refac: mv backend files to /open_webui dir

2024-09-04 16:54:48 +02:00

internal

chore: format

2026-02-11 16:24:11 -06:00

migrations

refac

2026-02-28 17:08:41 -06:00

models

chore: format

2026-03-01 13:29:06 -06:00

retrieval

fix: offline model retrieval, re-raise to disable instead of returning useless fallback (#22106)

2026-03-01 13:52:31 -05:00

routers

fix: enforce ownership check on user-memory collection queries (#22109)

2026-03-01 15:03:37 -05:00

socket

refac

2026-03-01 13:54:44 -06:00

static

refac

2025-08-10 00:02:58 +04:00

storage

chore: format

2026-02-11 16:24:11 -06:00

test

refac

2026-02-21 14:19:28 -06:00

tools

refac

2026-03-01 13:49:36 -06:00

utils

refac

2026-03-01 13:54:44 -06:00

__init__.py

Update __init__.py

2025-04-15 09:55:35 +02:00

alembic.ini

fix: Alembic CLI commands from failing

2025-08-15 04:17:47 -04:00

config.py

refac

2026-02-28 13:07:10 -06:00

constants.py

feat/enh: optional password validation

2025-11-20 17:44:49 -05:00

env.py

refac

2026-02-25 15:15:59 -06:00

functions.py

chore: format

2026-02-11 16:24:11 -06:00

main.py

chore: format

2026-02-28 21:28:59 -06:00

tasks.py

refac

2026-02-12 15:29:34 -06:00