GareArc 69b11cc364 security: fix IDOR and privilege escalation in set_default_provider ...

- Add tenant_id verification to prevent IDOR attacks
- Add admin check for enterprise tenant-wide default changes
- Preserve non-enterprise behavior (users can set own defaults)

2026-01-26 16:01:06 -08:00

..

app

refactor: port controllers/console/app/app.py (#30522)

2026-01-06 10:12:52 +08:00

auth

feat: implement workspace permission checks for member invitations an… (#31202)

2026-01-25 21:21:58 -08:00

billing

refactor: part of remove all reqparser (#29847)

2025-12-25 19:57:07 +08:00

datasets

refactor(api): clarify published RAG pipeline invoke naming (#30644)

2026-01-06 23:48:06 +09:00

explore

refactor: more ns.model to BaseModel (#30445)

2026-01-04 17:12:28 +08:00

tag

refactor: part of remove all reqparser (#29848)

2025-12-18 16:52:51 +08:00

workspace

security: fix IDOR and privilege escalation in set_default_provider

2026-01-26 16:01:06 -08:00

__init__.py

feat: introduce trigger functionality (#27644)

2025-11-12 17:59:37 +08:00

admin.py

refactor: admin api using session factory (#29628)

2025-12-15 12:01:41 +08:00

apikey.py

fix: Failed to load API definition (#28509)

2025-11-24 21:44:09 +09:00

error.py

Restructure the File errors in controller (#23801)

2025-08-13 17:06:07 +08:00

extension.py

refactor: split changes for api/controllers/console/extension.py (#29888)

2025-12-24 09:41:42 +08:00

feature.py

api -> console_ns (#28246)

2025-11-24 10:04:11 +08:00

files.py

refactor: port api/fields/file_fields.py (#30638)

2026-01-06 22:55:58 +08:00

init_validate.py

refactor: port reqparse to Pydantic model (#28949)

2025-12-05 13:05:53 +09:00

ping.py

api -> console_ns (#28246)

2025-11-24 10:04:11 +08:00

remote_files.py

refactor: port api/fields/file_fields.py (#30638)

2026-01-06 22:55:58 +08:00

setup.py

chore: case insensitive email (#29978)

2026-01-13 15:42:44 +08:00

spec.py

refactor(router): apply ns.route style (#26339)

2025-09-28 13:37:06 +08:00

version.py

refactor: port reqparse to Pydantic model (#28949)

2025-12-05 13:05:53 +09:00

wraps.py

feat: implement workspace permission checks for member invitations an… (#31202)

2026-01-25 21:21:58 -08:00