Files
open-webui-ai4me/backend/open_webui/routers
Classic298 4498c21f4c fix: enforce model access control on Ollama generate, show, embed, embeddings endpoints (#23631)
These four endpoints checked model existence but never verified the user has read access via AccessGrants, allowing any authenticated user to use restricted models.

Uses the canonical check_model_access helper from utils.access_control.
2026-04-12 12:29:26 -05:00
..
2026-03-17 17:58:01 -05:00
2026-04-02 19:31:15 -05:00
2026-04-11 17:06:58 -06:00
2026-04-01 05:55:48 -05:00
2026-03-26 18:17:49 -05:00
2026-04-02 08:11:06 -05:00
2026-04-11 15:23:37 -06:00
2026-03-17 17:58:01 -05:00
2026-03-24 04:49:48 -05:00
2026-03-17 17:58:01 -05:00
2026-03-24 06:07:20 -05:00
2026-03-24 04:49:48 -05:00
2026-04-02 22:34:51 -05:00
2026-04-02 02:06:21 -05:00
2026-03-24 04:49:48 -05:00
2026-04-02 02:06:21 -05:00
2026-04-01 05:52:03 -05:00
2026-03-17 17:58:01 -05:00
2026-03-17 17:58:01 -05:00
2026-03-29 21:01:10 -05:00
2026-04-02 02:06:21 -05:00
2026-04-01 01:21:21 -05:00
2026-03-26 19:01:33 -05:00