[PR #2903] [MERGED] Patch custom models endpoint #4170

Closed
opened 2026-02-22 18:35:17 -05:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/Mintplex-Labs/anything-llm/pull/2903
Author: @shatfield4
Created: 12/26/2024
Status: Merged
Merged: 12/30/2024
Merged by: @timothycarambat

Base: masterHead: patch-custom-models-endpoint


📝 Commits (3)

  • 1690e6a prevent non admin users from changing llm settings via custom-models endpoint
  • 89162ab permission middleware to JSDOC
  • 6e165f8 Merge branch 'master' into patch-custom-models-endpoint

📊 Changes

2 files changed (+13 additions, -6 deletions)

View changed files

📝 server/endpoints/system.js (+1 -1)
📝 server/utils/middleware/multiUserProtected.js (+12 -5)

📄 Description

Pull Request Type

  • feat
  • 🐛 fix
  • ♻️ refactor
  • 💄 style
  • 🔨 chore
  • 📝 docs

Relevant Issues

resolves #xxx

What is in this change?

  • Protect custom-models endpoint from being accessed by non-admin users

Additional Information

Developer Validations

  • I ran yarn lint from the root of the repo & committed changes
  • Relevant documentation has been updated
  • I have tested my code functionality
  • Docker build succeeds locally

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Mintplex-Labs/anything-llm/pull/2903 **Author:** [@shatfield4](https://github.com/shatfield4) **Created:** 12/26/2024 **Status:** ✅ Merged **Merged:** 12/30/2024 **Merged by:** [@timothycarambat](https://github.com/timothycarambat) **Base:** `master` ← **Head:** `patch-custom-models-endpoint` --- ### 📝 Commits (3) - [`1690e6a`](https://github.com/Mintplex-Labs/anything-llm/commit/1690e6aa69169a363ac0505085abd412190dedf1) prevent non admin users from changing llm settings via custom-models endpoint - [`89162ab`](https://github.com/Mintplex-Labs/anything-llm/commit/89162abce26962fecad1bb8cf9fc4e51ed924f82) permission middleware to JSDOC - [`6e165f8`](https://github.com/Mintplex-Labs/anything-llm/commit/6e165f890aff76771f8091c85751fb43c4771461) Merge branch 'master' into patch-custom-models-endpoint ### 📊 Changes **2 files changed** (+13 additions, -6 deletions) <details> <summary>View changed files</summary> 📝 `server/endpoints/system.js` (+1 -1) 📝 `server/utils/middleware/multiUserProtected.js` (+12 -5) </details> ### 📄 Description ### Pull Request Type <!-- For change type, change [ ] to [x]. --> - [ ] ✨ feat - [x] 🐛 fix - [ ] ♻️ refactor - [ ] 💄 style - [ ] 🔨 chore - [ ] 📝 docs ### Relevant Issues <!-- Use "resolves #xxx" to auto resolve on merge. Otherwise, please use "connect #xxx" --> resolves #xxx ### What is in this change? <!-- Describe the changes in this PR that are impactful to the repo. --> - Protect `custom-models` endpoint from being accessed by non-admin users ### Additional Information <!-- Add any other context about the Pull Request here that was not captured above. --> ### Developer Validations <!-- All of the applicable items should be checked. --> - [x] I ran `yarn lint` from the root of the repo & committed changes - [x] Relevant documentation has been updated - [x] I have tested my code functionality - [x] Docker build succeeds locally --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-22 18:35:17 -05:00
yindo closed this issue 2026-02-22 18:35:17 -05:00
yindo changed title from [PR #2903] Patch custom models endpoint to [PR #2903] [MERGED] Patch custom models endpoint 2026-06-05 15:17:11 -04:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#4170