mirror of
https://github.com/open-webui/open-webui.git
synced 2026-08-30 17:25:30 -05:00
[GH-ISSUE #18212] issue: file access control, no content, admin file permission, file 404 #57196
Reference in New Issue
Block a user
Originally created by @Hekas1 on GitHub (Oct 10, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/18212
Check Existing Issues
Installation Method
Docker
Open WebUI Version
v0.6.33
Ollama Version (if applicable)
No response
Operating System
Windows 10
Browser (if applicable)
No response
Confirmation
README.md.Expected Behavior
Using the interface's dialog channels, the administrator posts a file. Files sent by a user with administrator access level cannot be opened by a user with user access level. The user receives a "No content" message.
Actual Behavior
If a user with user rights sends a file to a dialogue channel between interface users, the file is available for viewing.
Steps to Reproduce
Logs & Screenshots
Logs when attempting to access a file uploaded by an admin by a user with user level
2025-10-10 14:13:20.066 | 2025-10-10 10:13:20.066 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.19.0.1:0 - "GET /api/v1/files/89b7df77-72d2-4f28-8eb7-5cbe3a27843d HTTP/1.1" 404
2025-10-10 14:13:21.674 | 2025-10-10 10:13:21.674 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.19.0.1:0 - "GET /api/v1/files/89b7df77-72d2-4f28-8eb7-5cbe3a27843d/content HTTP/1.1" 404
Additional Information
No response
@tjbck commented on GitHub (Oct 10, 2025):
Intended behaviour currently. #8050