I have searched the existing issues and discussions.
Problem Description
Need to restrict API access to prevent unauthorized connection by Code Assistants (Roo-Code) by users that should not. The attached patch will all this permission to be applied at the group level if the global permission Enable API Keys is disabled.
Originally created by @GrimJay on GitHub (Oct 8, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/18156
### Check Existing Issues
- [x] I have searched the existing issues and discussions.
### Problem Description
Need to restrict API access to prevent unauthorized connection by Code Assistants (Roo-Code) by users that should not. The attached patch will all this permission to be applied at the group level if the global permission Enable API Keys is disabled.
A patch file compatible with v0.6.33 is attached.
### Desired Solution you'd like
[group-permission-enable-api-key.patch](https://github.com/user-attachments/files/22781513/group-permission-enable-api-key.patch)
### Alternatives Considered
_No response_
### Additional Context
[group-permission-enable-api-key.patch](https://github.com/user-attachments/files/22781500/group-permission-enable-api-key.patch)
Feel free to submit a PR, but be sure to follow the pull request template. PRs will not be accepted in Git Patch format.
<!-- gh-comment-id:3382411440 -->
@silentoplayz commented on GitHub (Oct 8, 2025):
Feel free to submit a PR, but be sure to follow the pull request template. PRs will not be accepted in Git Patch format.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @GrimJay on GitHub (Oct 8, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/18156
Check Existing Issues
Problem Description
Need to restrict API access to prevent unauthorized connection by Code Assistants (Roo-Code) by users that should not. The attached patch will all this permission to be applied at the group level if the global permission Enable API Keys is disabled.
A patch file compatible with v0.6.33 is attached.
Desired Solution you'd like
group-permission-enable-api-key.patch
Alternatives Considered
No response
Additional Context
group-permission-enable-api-key.patch
@silentoplayz commented on GitHub (Oct 8, 2025):
Feel free to submit a PR, but be sure to follow the pull request template. PRs will not be accepted in Git Patch format.
@tjbck commented on GitHub (Oct 8, 2025):
PR welcome!