Classic298 2054ee0b73 fix: enforce ownership check on user-memory collection queries (#22109) ...

* fix: enforce ownership check on user-memory collection queries

fix: enforce ownership check on user-memory collection queries

Prevent authenticated users from querying other users' memory
collections via the /query/doc and /query/collection endpoints.
A new _validate_collection_access helper rejects requests for
user-memory-{UUID} collections where the UUID does not match
the requesting user. Admins bypass the check.

* Update retrieval.py

* Update retrieval.py

2026-03-01 15:03:37 -05:00

..

analytics.py

chore: format

2026-02-11 16:24:11 -06:00

audio.py

fix: suppress internal path leakage in audio transcription errors (GHSA-vvxm-vxmr-624h) (#22108)

2026-03-01 14:44:49 -05:00

auths.py

fix(ui): allow empty LDAP Application DN value and password in General setting… (#21742)

2026-02-22 17:58:12 -06:00

channels.py

chore: format

2026-03-01 13:34:09 -06:00

chats.py

refac

2026-02-22 17:51:03 -06:00

configs.py

refac

2026-02-27 16:03:43 -06:00

evaluations.py

chore: format

2026-01-09 20:44:31 +04:00

files.py

refac

2026-03-01 13:49:36 -06:00

folders.py

chore: format

2026-02-11 16:24:11 -06:00

functions.py

chore: format

2026-02-11 16:24:11 -06:00

groups.py

chore: format

2026-02-11 16:24:11 -06:00

images.py

refac

2026-02-22 18:55:24 -06:00

knowledge.py

refac

2026-03-01 13:20:55 -06:00

memories.py

refac

2026-02-11 15:55:23 -06:00

models.py

refac

2026-02-25 15:15:59 -06:00

notes.py

refac

2026-02-25 15:15:59 -06:00

ollama.py

chore: format

2026-02-13 15:00:39 -06:00

openai.py

refac

2026-02-21 15:35:34 -06:00

pipelines.py

refac

2026-02-15 17:55:59 -06:00

prompts.py

refac

2026-02-25 15:15:59 -06:00

retrieval.py

fix: enforce ownership check on user-memory collection queries (#22109)

2026-03-01 15:03:37 -05:00

scim.py

fix: clamp SCIM pagination args instead of rejecting them (#21577)

2026-02-19 15:08:42 -06:00

skills.py

refac

2026-02-25 15:15:59 -06:00

tasks.py

chore: format

2026-02-11 16:24:11 -06:00

terminals.py

chore: format

2026-02-28 21:28:59 -06:00

tools.py

refac

2026-02-25 15:15:59 -06:00

users.py

enh: access grant level perms

2026-02-23 15:49:05 -06:00

utils.py

chore: format

2026-02-11 16:24:11 -06:00