Prevent Admins from viewing uploaded user files #1930

New Issue

2025-11-11T14:56:44-06:00

GiteaMirror commented

2025-11-11 14:56:44 -06:00

Originally created by @tkg61 on GitHub (Aug 29, 2024).

Is your feature request related to a problem? Please describe.
In this commit it was fixed so that files would remain private to their own users but it also seems like admins still can view all files (openwebui.url/api/v1/files).

i would like to request the same feature as preventing the admins from seeing user chats and have admins also not see user files.

Describe the solution you'd like
a configuration item that prevents Admins from seeing user uploaded files for privacy and insider threat reasons

e.g. ENABLE_ADMIN_FILE_ACCESS=false

Describe alternatives you've considered
N/A

Additional context
N/A

Originally created by @tkg61 on GitHub (Aug 29, 2024). **Is your feature request related to a problem? Please describe.** In this [commit](https://github.com/open-webui/open-webui/commit/4519ddd0e97b33114d5ad0d012ed4523937f55c7) it was fixed so that files would remain private to their own users but it also seems like admins still can view all files (openwebui.url/api/v1/files). i would like to request the same feature as [preventing the admins from seeing user chats](https://github.com/open-webui/open-webui/discussions/2807) and have admins also not see user files. **Describe the solution you'd like** a configuration item that prevents Admins from seeing user uploaded files for privacy and insider threat reasons e.g. ENABLE_ADMIN_FILE_ACCESS=false **Describe alternatives you've considered** N/A **Additional context** N/A

GiteaMirror closed this issue

2025-11-11 14:56:44 -06:00

GiteaMirror commented

2025-11-11 14:56:44 -06:00

@silentoplayz commented on GitHub (Aug 29, 2024):

I would like to request the same feature as preventing the admins from seeing user chats

This has already been implemented as an environment variable ENABLE_ADMIN_CHAT_ACCESS=false. Here is the related merged PR, for reference.

As for Admins still being able to view all files uploaded (openwebui.url/api/v1/files), I'm not sure if that is considered a bug. I'll leave this issue open for hopefully another contributor to come along and provide you with a better answer.

@silentoplayz commented on GitHub (Aug 29, 2024): > I would like to request the same feature as [preventing the admins from seeing user chats](https://github.com/open-webui/open-webui/discussions/2807) This has already been implemented as an environment variable `ENABLE_ADMIN_CHAT_ACCESS=false`. [Here](https://github.com/open-webui/open-webui/pull/4351) is the related merged PR, for reference. As for Admins still being able to view all files uploaded (openwebui.url/api/v1/files), I'm not sure if that is considered a bug. I'll leave this issue open for hopefully another contributor to come along and provide you with a better answer.