mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-08 04:16:03 -05:00
[GH-ISSUE #2143] feat: Enrich super admin and admin role by assigning their respective roles #28299
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/open-webui#28299
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Lanhild on GitHub (May 9, 2024).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/2143
There's been a new super admin role since the
0.1.123version to restrict user actions to other admins.It'd be useful if model downloading/deletion were restricted to the super admin.
@Lanhild commented on GitHub (May 9, 2024):
After being confused by the 2nd line;
I discussed with another contributor about this, and thought some modifications would be necessary for this new "super admin" role
Below is a transcript of our conversation.
@Lanhild commented on GitHub (May 9, 2024):
@tjbck here's a link to a table describing the needs/permissions for this "Super Admin" role.
It restricts "Admin" permissions a lot, but it makes sense in the way that the "Super Admin"(s) exists, and mitigates the risk of a bad actor compromising one's WebUI instance.
https://docs.google.com/spreadsheets/d/1Zb6_aC3h-wPb7K7eVxFYO9PV0k4PAlIUKM0AxRQd_dc/edit?usp=sharing
Anyhow, once we have the role for that, it'll be easier in the future to allow/restrict other features.
@elipinals12 commented on GitHub (Jan 27, 2025):
Not sure if this is mentioned elsewhere, I did look but couldn't find any mention, for some reason the only way to change the super admin's email is by editing their profile through a normal admin's account? It's funny a super admin doesn't have the priv to edit their own email but a normal admin can edit the super admin's email for them...