QuantumGhost 874406d934 security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518) ... The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and `ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`) endpoints do not properly validate user permissions, allowing users without `editor` permission to access restricted functionality. This PR addresses this issue by adding proper permission check.		2025-09-11 14:53:35 +08:00
..
factories	add more dataclass (#25039)	2025-09-06 03:20:13 +08:00
services	security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518)	2025-09-11 14:53:35 +08:00
tasks	Feature add test containers create segment to index task (#25450)	2025-09-10 10:02:53 +08:00
workflow	Feat add testcontainers test (#23269)	2025-08-04 19:27:36 +08:00
__init__.py	Feat add testcontainers test (#23269)	2025-08-04 19:27:36 +08:00
conftest.py	remove bare list, dict, Sequence, None, Any (#25058)	2025-09-06 03:32:23 +08:00