QuantumGhost 874406d934 security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518) ... The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and `ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`) endpoints do not properly validate user permissions, allowing users without `editor` permission to access restricted functionality. This PR addresses this issue by adding proper permission check.		2025-09-11 14:53:35 +08:00
..
tools	feat: add MCP server headers support #22718 (#24760)	2025-09-08 14:10:55 +08:00
workflow	Fix basedpyright type errors (#25435)	2025-09-10 01:54:26 +08:00
__init__.py	Feat add testcontainers test for account service (#23380)	2025-08-05 20:15:39 +08:00
test_account_service.py	security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518)	2025-09-11 14:53:35 +08:00
test_advanced_prompt_template_service.py	Add more comprehensive Test Containers Based Tests for advanced prompt service (#23850)	2025-08-13 11:21:32 +08:00
test_agent_service.py	more assert (#24996)	2025-09-08 09:59:43 +08:00
test_annotation_service.py	more assert (#24996)	2025-09-08 09:59:43 +08:00
test_api_based_extension_service.py	try ast-grep (#24149)	2025-08-19 13:41:52 +08:00
test_app_dsl_service.py	Export DSL from history (#24939)	2025-09-02 21:36:52 +08:00
test_app_generate_service.py	Add Test Containers Based Tests for App Generation Services (#23899)	2025-08-14 10:16:41 +08:00
test_app_service.py	more assert (#24996)	2025-09-08 09:59:43 +08:00
test_feature_service.py	feat: add testcontainers based tests for feature service (#24026)	2025-08-19 09:32:47 +08:00
test_file_service.py	more assert (#24996)	2025-09-08 09:59:43 +08:00
test_message_service.py	try ast-grep (#24149)	2025-08-19 13:41:52 +08:00
test_metadata_service.py	more assert (#24996)	2025-09-08 09:59:43 +08:00
test_model_load_balancing_service.py	update sql in batch (#24801)	2025-09-10 13:00:17 +08:00
test_model_provider_service.py	Fix login tokens and fix task clean_messages create_time. (#24574)	2025-08-27 13:32:18 +08:00
test_saved_message_service.py	feature: add test containers base tests for saved message service (#24259)	2025-08-21 09:34:49 +08:00
test_tag_service.py	update sql in batch (#24801)	2025-09-10 13:00:17 +08:00
test_web_conversation_service.py	update sql in batch (#24801)	2025-09-10 13:00:17 +08:00
test_webapp_auth_service.py	refactor: improve plugin version validation to support full semantic versioning (#25161)	2025-09-05 12:39:48 +08:00
test_website_service.py	more assert (#24996)	2025-09-08 09:59:43 +08:00
test_workflow_app_service.py	hotfix: add test containers based tests for workflow app service (#24501)	2025-08-26 09:24:45 +08:00
test_workflow_draft_variable_service.py	fix(api): fix flaky tests by generating unique variable names (#23768)	2025-08-12 09:31:15 +08:00
test_workflow_run_service.py	hotfix: add test containers based tests for workflow run service (#24602)	2025-08-27 10:24:34 +08:00
test_workflow_service.py	Feature add test containers workflow service (#24666)	2025-08-28 09:31:29 +08:00
test_workspace_service.py	feat: add test containers based tests for workspace service (#24752)	2025-08-29 12:10:13 +08:00