mirror of
https://github.com/open-webui/open-webui.git
synced 2026-03-10 15:54:15 -05:00
feat: Enable API Keys permission at Group level - Patch Attached #6628
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @GrimJay on GitHub (Oct 8, 2025).
Check Existing Issues
Problem Description
Need to restrict API access to prevent unauthorized connection by Code Assistants (Roo-Code) by users that should not. The attached patch will all this permission to be applied at the group level if the global permission Enable API Keys is disabled.
A patch file compatible with v0.6.33 is attached.
Desired Solution you'd like
group-permission-enable-api-key.patch
Alternatives Considered
No response
Additional Context
group-permission-enable-api-key.patch
@silentoplayz commented on GitHub (Oct 8, 2025):
Feel free to submit a PR, but be sure to follow the pull request template. PRs will not be accepted in Git Patch format.
@tjbck commented on GitHub (Oct 8, 2025):
PR welcome!