github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-05-07 11:28:35 -05:00
Code Issues 1.3k Packages Projects Releases 126 Wiki Activity

[GH-ISSUE #5491] bug: RBAC file API #52668

New Issue
Closed
opened 2026-05-05 13:46:15 -05:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-05-05 13:46:15 -05:00
Owner
Copy Link

Originally created by @jannikstdl on GitHub (Sep 18, 2024).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/5491

Bug Report

Environment

  • Open WebUI Version: -> latest dev (0.3.22)
  • Also on older versions

Description

Bug Summary:
The new added RBAC in file access allows you to only download files if you uploaded them. But for collections it fails. Since collections are uploaded by admins by now and if you then give a model this collection as a normal user you cant download the file in the citations.p

Reproduction Details

Steps to Reproduce:

  1. Add a collection as admin user
  2. Add the collection to a models knowledge
  3. Log i as normal user
  4. Ask the model something
  5. Try to open the file from the citations

Logs and Screenshots

https://github.com/user-attachments/assets/7e4f97bf-4acd-45dc-b689-840cfae3ab00

Originally created by @jannikstdl on GitHub (Sep 18, 2024). Original GitHub issue: https://github.com/open-webui/open-webui/issues/5491 # Bug Report ## Environment - **Open WebUI Version:** -> latest dev (0.3.22) - Also on older versions ## Description **Bug Summary:** The new added RBAC in file access allows you to only download files if you uploaded them. But for collections it fails. Since collections are uploaded by admins by now and if you then give a model this collection as a normal user you cant download the file in the citations.p ## Reproduction Details **Steps to Reproduce:** 1. Add a collection as admin user 2. Add the collection to a models knowledge 3. Log i as normal user 4. Ask the model something 5. Try to open the file from the citations ## Logs and Screenshots https://github.com/user-attachments/assets/7e4f97bf-4acd-45dc-b689-840cfae3ab00
GiteaMirror commented 2026-05-05 13:46:16 -05:00
Author
Owner
Copy Link

@tjbck commented on GitHub (Sep 18, 2024):

Merging this issue with #3527

<!-- gh-comment-id:2359622301 --> @tjbck commented on GitHub (Sep 18, 2024): Merging this issue with #3527
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#52668
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?