Mintplex-Labs/anything-llm
1
0
Fork 0
mirror of https://github.com/Mintplex-Labs/anything-llm.git synced 2026-07-19 22:23:50 -04:00
Code Issues 328 Packages Projects Releases 10 Wiki Activity

[GH-ISSUE #4382] [FEAT]: Granular Permissions for Image/Document Upload to Default Users Without Full Manager Access #2795

New Issue
Closed
opened 2026-02-22 18:31:17 -05:00 by yindo · 2 comments
yindo commented 2026-02-22 18:31:17 -05:00
Owner
Copy Link
Copy Source

Originally created by @masada-x on GitHub (Sep 15, 2025).
Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/4382

What would you like to see?

We are currently testing AnythingLLM in our compliance department, and it is working very well with admin and manager accounts. However, the default user accounts do not have the option to upload files, including images. When we grant users manager access to enable uploads, they gain the ability to mess around with already embedded files and workspace settings, which poses a security and compliance risk in our environment. We want to allow default users to upload images (and potentially other documents) only, without providing them broader access to modify existing content or settings.

This is particularly important for our use case where users in the compliance team need to upload specific images for analysis via the AI, but should not have permissions to alter shared workspaces or system configurations.

Originally created by @masada-x on GitHub (Sep 15, 2025). Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/4382 ### What would you like to see? We are currently testing AnythingLLM in our compliance department, and it is working very well with admin and manager accounts. However, the default user accounts do not have the option to upload files, including images. When we grant users manager access to enable uploads, they gain the ability to mess around with already embedded files and workspace settings, which poses a security and compliance risk in our environment. We want to allow default users to upload images (and potentially other documents) only, without providing them broader access to modify existing content or settings. This is particularly important for our use case where users in the compliance team need to upload specific images for analysis via the AI, but should not have permissions to alter shared workspaces or system configurations.
yindo added the enhancementfeature request labels 2026-02-22 18:31:17 -05:00
yindo closed this issue 2026-02-22 18:31:17 -05:00
yindo commented 2026-02-22 18:31:17 -05:00
Author
Owner
Copy Link
Copy Source

@timothycarambat commented on GitHub (Sep 16, 2025):

Absolutely, this is being tracked in #1787 (PR #1787)

There are some closed issues that are tangential to this exact issue, all rolled up to that linked issue as that is the more over-arching issue. Right now, users of any role can attach any files to a thread/workspace. But yes, embedding is still limited and default users cannot embed files to a workspace if they are larger than the models context window

https://docs.anythingllm.com/chatting-with-documents/introduction

I am not sure what version you are on, but I assume you want default to embed files as well - but just not have their embedded files impact the global shared workspace as well. Yeah?

@timothycarambat commented on GitHub (Sep 16, 2025): Absolutely, this is being tracked in #1787 (PR #1787) There are some closed issues that are tangential to this exact issue, all rolled up to that linked issue as that is the more over-arching issue. Right now, users of any role can _attach_ any files to a thread/workspace. But yes, _embedding_ is still limited and default users cannot embed files to a workspace if they are larger than the models context window https://docs.anythingllm.com/chatting-with-documents/introduction I am not sure what version you are on, but I assume you want default to embed files as well - but just not have their embedded files impact the global shared workspace as well. Yeah?
yindo commented 2026-02-22 18:31:17 -05:00
Author
Owner
Copy Link
Copy Source

@masada-x commented on GitHub (Sep 17, 2025):

@timothycarambat Thank you I updated to latest version now. I can see attachment in default user and it's working. a question the image we upload thru default user for compliance reply with different answer than admin/manager account we use to upload the image.

@masada-x commented on GitHub (Sep 17, 2025): @timothycarambat Thank you I updated to latest version now. I can see attachment in default user and it's working. a question the image we upload thru default user for compliance reply with different answer than admin/manager account we use to upload the image.
yindo changed title from [FEAT]: Granular Permissions for Image/Document Upload to Default Users Without Full Manager Access to [GH-ISSUE #4382] [FEAT]: Granular Permissions for Image/Document Upload to Default Users Without Full Manager Access 2026-06-05 14:48:35 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Desktop
Docker
Integration Request
Integration Request
OS: Linux
OS: Mobile
OS: Windows
UI/UX
blocked
bug
bug
core-team-only
documentation
duplicate
embed-widget
enhancement
feature request
github_actions
good first issue
investigating
needs info / can't replicate
possible bug
pull-request
Mirrored from GitHub Pull Request
 question
stage: specifications
wontfix
No Label enhancement feature request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#2795
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?