GareArc 990e8feee8 security: fix IDOR and privilege escalation in set_default_provider ...

- Add tenant_id verification to prevent IDOR attacks
- Add admin check for enterprise tenant-wide default changes
- Preserve non-enterprise behavior (users can set own defaults)

2026-02-06 13:32:18 +08:00

..

app

refactor: port api/controllers/console/app/annotation.py api/controllers/console/explore/trial.py api/controllers/console/workspace/account.py api/controllers/console/workspace/members.py api/controllers/service_api/app/annotation.py to basemodel (#31833)

2026-02-03 09:59:00 +08:00

auth

refactor: port api/controllers/console/app/audio.py api/controllers/console/app/message.py api/controllers/console/auth/data_source_oauth.py api/controllers/console/auth/forgot_password.py api/controllers/console/workspace/endpoint.py (#30680)

2026-02-02 18:03:07 +09:00

billing

refactor: part of remove all reqparser (#29847)

2025-12-25 19:57:07 +08:00

datasets

refactor: port api/controllers/console/datasets/data_source.py /datasets/metadata.py /service_api/dataset/metadata.py /nodes/agent/agent_node.py api/core/workflow/nodes/datasource/datasource_node.py api/services/dataset_service.py to match case (#31836)

2026-02-02 21:03:16 +09:00

explore

refactor: port api/controllers/console/app/annotation.py api/controllers/console/explore/trial.py api/controllers/console/workspace/account.py api/controllers/console/workspace/members.py api/controllers/service_api/app/annotation.py to basemodel (#31833)

2026-02-03 09:59:00 +08:00

tag

fix: "refactor: port api/controllers/console/tag/tags.py to ov3" (#31887)

2026-02-03 22:18:53 +08:00

workspace

security: fix IDOR and privilege escalation in set_default_provider

2026-02-06 13:32:18 +08:00

__init__.py

revert: revert human input relevant code (#31766)

2026-01-30 19:18:49 +08:00

admin.py

refactor: ExporleBanner to TypeBase (#31698)

2026-01-29 15:34:14 +09:00

apikey.py

fix: doc not gen bug (#31547)

2026-01-27 20:19:39 +09:00

error.py

Restructure the File errors in controller (#23801)

2025-08-13 17:06:07 +08:00

extension.py

refactor: split changes for api/controllers/console/extension.py (#29888)

2025-12-24 09:41:42 +08:00

feature.py

fix: revert "refactor: api/controllers/console/feature.py (test)" (#31850)

2026-02-03 12:26:47 +08:00

files.py

refactor: port api/fields/file_fields.py (#30638)

2026-01-06 22:55:58 +08:00

init_validate.py

refactor: init_validate.py to v3 (#31457)

2026-01-30 22:39:02 +09:00

ping.py

feat: init fastopenapi (#30453)

2026-01-23 21:07:52 +09:00

remote_files.py

refactor: api/controllers/console/remote_files.py to ov3 (#31466)

2026-01-30 19:32:20 +09:00

setup.py

refactor: api/controllers/console/setup.py to ov3 (#31465)

2026-01-26 15:04:33 +08:00

spec.py

refactor(router): apply ns.route style (#26339)

2025-09-28 13:37:06 +08:00

version.py

refactor: api/controllers/console/version.py to v3 (#31463)

2026-01-26 15:04:25 +08:00

wraps.py

feat: implement workspace permission checks for member invitations an… (#31202)

2026-01-18 19:35:50 -08:00