GareArc 990e8feee8 security: fix IDOR and privilege escalation in set_default_provider ...

- Add tenant_id verification to prevent IDOR attacks
- Add admin check for enterprise tenant-wide default changes
- Preserve non-enterprise behavior (users can set own defaults)

2026-02-06 13:32:18 +08:00

..

__init__.py

use deco to avoid current_user (#26077)

2025-10-16 15:45:51 +09:00

account.py

refactor: port api/controllers/console/app/annotation.py api/controllers/console/explore/trial.py api/controllers/console/workspace/account.py api/controllers/console/workspace/members.py api/controllers/service_api/app/annotation.py to basemodel (#31833)

2026-02-03 09:59:00 +08:00

agent_providers.py

api -> console_ns (#28246)

2025-11-24 10:04:11 +08:00

endpoint.py

refactor: port api/controllers/console/app/audio.py api/controllers/console/app/message.py api/controllers/console/auth/data_source_oauth.py api/controllers/console/auth/forgot_password.py api/controllers/console/workspace/endpoint.py (#30680)

2026-02-02 18:03:07 +09:00

error.py

fix: drop dead code phase2 unused class (#22042)

2025-07-17 09:33:07 +08:00

load_balancing_config.py

refactor: split changes for api/controllers/console/workspace/load_ba… (#29887)

2025-12-26 11:00:03 +08:00

members.py

refactor: port api/controllers/console/app/annotation.py api/controllers/console/explore/trial.py api/controllers/console/workspace/account.py api/controllers/console/workspace/members.py api/controllers/service_api/app/annotation.py to basemodel (#31833)

2026-02-03 09:59:00 +08:00

model_providers.py

refactor: port reqparse to Pydantic model (#28913)

2025-11-30 16:09:42 +09:00

models.py

fix: doc not gen bug (#31547)

2026-01-27 20:19:39 +09:00

plugin.py

fix: doc not gen bug (#31547)

2026-01-27 20:19:39 +09:00

tool_providers.py

security: fix IDOR and privilege escalation in set_default_provider

2026-02-06 13:32:18 +08:00

trigger_providers.py

refactor: split changes for api/controllers/console/workspace/trigger… (#30627)

2026-01-07 21:18:02 +08:00

workspace.py

feat: implement workspace permission checks for member invitations an… (#31202)

2026-01-18 19:35:50 -08:00