[GH-ISSUE #17513] issue: Non-admin users private knowledge collections are ignored in chat context

Originally created by @davidpede on GitHub (Sep 17, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/17513 ### Check Existing Issues - [x] I have searched for any existing and/or related issues. - [x] I have searched for any existing and/or related discussions. - [x] I am using the latest version of Open WebUI. ### Installation Method Docker ### Open WebUI Version v0.6.28 ### Ollama Version (if applicable) _No response_ ### Operating System Ubuntu ### Browser (if applicable) MS Edge ### Confirmation - [x] I have read and followed all instructions in `README.md`. - [x] I am using the latest version of **both** Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have **provided every relevant configuration, setting, and environment variable used in my setup.** - [x] I have clearly **listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup** (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc). - [x] I have documented **step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation**. My steps: - Start with the initial platform/version/OS and dependencies used, - Specify exact install/launch/configure commands, - List URLs visited, user input (incl. example values/emails/passwords if needed), - Describe all options and toggles enabled or changed, - Include any files or environmental changes, - Identify the expected and actual result at each stage, - Ensure any reasonably skilled user can follow and hit the same issue. ### Expected Behavior 1. A **standard user (non admin)** creates a knowledge collection, uploads files to it and leaves access set as private. 2. In a new chat, they load the collection using the hash command and prompt the model 3. The model **should have access** to the collection files content in context as the user created/owns the collection ### Actual Behavior 1. A **standard user (non admin)** creates a knowledge collection, uploads files to it and leaves access set as **private**. 2. In a new chat, they load the collection using the hash command and prompt the model 3. The model **does not have access** to the collection files content in context ### Steps to Reproduce 1. Pull image: `docker pull ghcr.io/open-webui/open-webui:main` 2. Run container: `docker run -d -p 3000:8080 -v open-webui:/app/backend/data --name open-webui ghcr.io/open-webui/open-webui:main` 3. Open MS Edge and goto: http://localhost:3000 4. Create admin user account and login 5. Create standard user account and login incognito 6. With the **standard user (non admin)**, create a knowledge collection, upload files to it and leave access set as **private**. 7. In a new chat, load the collection using the hash command and prompt the model with: `Are any files loaded into context?` 8. The model response shows 'No sources found' Related steps that work as expected: - If a standard user loads a public collection using the hash command then it works as expected - If a standard user loads private collection files **individually** using the hash command then it works as expected - If an admin user loads a private collection using the hash command then it works as expected ### Logs & Screenshots ### Standard user and private collection: <img width="997" height="322" alt="Image" src="https://github.com/user-attachments/assets/40a4c7b8-e6dd-4522-9de2-73fee6879f08" /> ### Standard user and individual files from a private collection: <img width="989" height="535" alt="Image" src="https://github.com/user-attachments/assets/9d01faea-49ad-45ce-a5d4-3229df7934b5" /> ### Standard user and public collection: <img width="1005" height="382" alt="Image" src="https://github.com/user-attachments/assets/36e9fe35-34a0-413d-8d41-ee881b6174d2" /> ### Additional Information - If a standard user loads a public collection using the hash command then it works as expected - If a standard user loads private collection files **individually** using the hash command then it works as expected - If an admin user loads a private collection using the hash command then it works as expected

GiteaMirror commented

2026-04-25 07:43:45 -05:00

Owner

Originally created by @davidpede on GitHub (Sep 17, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/17513

Check Existing Issues

I have searched for any existing and/or related issues.
I have searched for any existing and/or related discussions.
I am using the latest version of Open WebUI.

Installation Method

Docker

Open WebUI Version

v0.6.28

Ollama Version (if applicable)

No response

Operating System

Ubuntu

Browser (if applicable)

MS Edge

Confirmation

I have read and followed all instructions in README.md.
I am using the latest version of both Open WebUI and Ollama.
I have included the browser console logs.
I have included the Docker container logs.
I have provided every relevant configuration, setting, and environment variable used in my setup.
I have clearly listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc).
I have documented step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation. My steps:
Start with the initial platform/version/OS and dependencies used,
Specify exact install/launch/configure commands,
List URLs visited, user input (incl. example values/emails/passwords if needed),
Describe all options and toggles enabled or changed,
Include any files or environmental changes,
Identify the expected and actual result at each stage,
Ensure any reasonably skilled user can follow and hit the same issue.

Expected Behavior

A standard user (non admin) creates a knowledge collection, uploads files to it and leaves access set as private.
In a new chat, they load the collection using the hash command and prompt the model
The model should have access to the collection files content in context as the user created/owns the collection

Actual Behavior

A standard user (non admin) creates a knowledge collection, uploads files to it and leaves access set as private.
In a new chat, they load the collection using the hash command and prompt the model
The model does not have access to the collection files content in context

Steps to Reproduce

Pull image: docker pull ghcr.io/open-webui/open-webui:main
Run container: docker run -d -p 3000:8080 -v open-webui:/app/backend/data --name open-webui ghcr.io/open-webui/open-webui:main
Open MS Edge and goto: http://localhost:3000
Create admin user account and login
Create standard user account and login incognito
With the standard user (non admin), create a knowledge collection, upload files to it and leave access set as private.
In a new chat, load the collection using the hash command and prompt the model with: Are any files loaded into context?
The model response shows 'No sources found'

Related steps that work as expected:

If a standard user loads a public collection using the hash command then it works as expected
If a standard user loads private collection files individually using the hash command then it works as expected
If an admin user loads a private collection using the hash command then it works as expected