From 1cee1a25b675c2ac19ce94d03d75843854a1ede0 Mon Sep 17 00:00:00 2001 From: NeatGuyCoding <15627489+NeatGuyCoding@users.noreply.github.com> Date: Mon, 18 May 2026 18:15:51 +0800 Subject: [PATCH] fix(console): require admin/owner to set default builtin tool credential (#36264) Signed-off-by: NeatGuyCoding <15627489+NeatGuyCoding@users.noreply.github.com> --- api/controllers/console/workspace/tool_providers.py | 1 + 1 file changed, 1 insertion(+) diff --git a/api/controllers/console/workspace/tool_providers.py b/api/controllers/console/workspace/tool_providers.py index e653c9064c..cb01a02318 100644 --- a/api/controllers/console/workspace/tool_providers.py +++ b/api/controllers/console/workspace/tool_providers.py @@ -874,6 +874,7 @@ class ToolBuiltinProviderSetDefaultApi(Resource): @console_ns.expect(console_ns.models[BuiltinProviderDefaultCredentialPayload.__name__]) @setup_required @login_required + @is_admin_or_owner_required @account_initialization_required def post(self, provider): _, current_tenant_id = current_account_with_tenant()