QuantumGhost 874406d934 security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518) ... The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and `ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`) endpoints do not properly validate user permissions, allowing users without `editor` permission to access restricted functionality. This PR addresses this issue by adding proper permission check.		2025-09-11 14:53:35 +08:00
..
artifact_tests/dependencies	build: introduce uv as Python package manager (#16317)	2025-04-15 16:16:49 +08:00
integration_tests	security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518)	2025-09-11 14:53:35 +08:00
test_containers_integration_tests	security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518)	2025-09-11 14:53:35 +08:00
unit_tests	update sql in batch (#24801)	2025-09-10 13:00:17 +08:00
__init__.py	Initial commit	2023-05-15 08:51:32 +08:00