[PR #256] [MERGED] Prevent updates of specific keys via API #3266

Closed
opened 2026-02-22 18:33:25 -05:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/Mintplex-Labs/anything-llm/pull/256
Author: @timothycarambat
Created: 9/29/2023
Status: Merged
Merged: 9/29/2023
Merged by: @timothycarambat

Base: masterHead: 225-security-api


📝 Commits (1)

  • 4c5ed50 Prevent updates of specific keys via API

📊 Changes

3 files changed (+42 additions, -11 deletions)

View changed files

📝 server/endpoints/system.js (+33 -6)
📝 server/utils/helpers/updateENV.js (+8 -4)
📝 server/utils/prisma/migrateFromSqlite.js (+1 -1)

📄 Description

prevent non-admin from updating settings
prevent password updates in multi-user mdoe

resolves #255


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Mintplex-Labs/anything-llm/pull/256 **Author:** [@timothycarambat](https://github.com/timothycarambat) **Created:** 9/29/2023 **Status:** ✅ Merged **Merged:** 9/29/2023 **Merged by:** [@timothycarambat](https://github.com/timothycarambat) **Base:** `master` ← **Head:** `225-security-api` --- ### 📝 Commits (1) - [`4c5ed50`](https://github.com/Mintplex-Labs/anything-llm/commit/4c5ed507368da2e892f819535b7cbfb8ef9f53f2) Prevent updates of specific keys via API ### 📊 Changes **3 files changed** (+42 additions, -11 deletions) <details> <summary>View changed files</summary> 📝 `server/endpoints/system.js` (+33 -6) 📝 `server/utils/helpers/updateENV.js` (+8 -4) 📝 `server/utils/prisma/migrateFromSqlite.js` (+1 -1) </details> ### 📄 Description prevent non-admin from updating settings prevent password updates in multi-user mdoe resolves #255 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-22 18:33:25 -05:00
yindo closed this issue 2026-02-22 18:33:25 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#3266