mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-08 12:58:11 -05:00
[PR #23747] [CLOSED] fix: add missing db parameter to filter_allowed_access_grants in update_note_access_by_id #66208
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/23747
Author: @Ricardo-M-L
Created: 4/15/2026
Status: ❌ Closed
Base:
dev← Head:fix/notes-missing-db-param-v2📝 Commits (1)
59e6392fix: add missing db parameter to filter_allowed_access_grants in update_note_access_by_id📊 Changes
1 file changed (+1 additions, -0 deletions)
View changed files
📝
backend/open_webui/routers/notes.py(+1 -0)📄 Description
Description
In
update_note_access_by_id(), the call tofilter_allowed_access_grants()at line 394 is missing thedb=dbparameter. The same function is called correctly withdb=dbincreate_new_note()(line 224) andupdate_note_by_id()(line 336).Without
db, the function falls back toNoneand may fail to validate group-based access grants that require database lookups.Changelog
dbparameter infilter_allowed_access_grants()call withinupdate_note_access_by_id()Breaking Changes
Contributor License Agreement
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.