GareArc 69b11cc364 security: fix IDOR and privilege escalation in set_default_provider ...

- Add tenant_id verification to prevent IDOR attacks
- Add admin check for enterprise tenant-wide default changes
- Preserve non-enterprise behavior (users can set own defaults)

2026-01-26 16:01:06 -08:00

..

__init__.py

use deco to avoid current_user (#26077)

2025-10-16 15:45:51 +09:00

account.py

chore: case insensitive email (#29978)

2026-01-13 15:42:44 +08:00

agent_providers.py

api -> console_ns (#28246)

2025-11-24 10:04:11 +08:00

endpoint.py

refactor: port reqparse to Pydantic model (#28913)

2025-11-30 16:09:42 +09:00

error.py

fix: drop dead code phase2 unused class (#22042)

2025-07-17 09:33:07 +08:00

load_balancing_config.py

refactor: split changes for api/controllers/console/workspace/load_ba… (#29887)

2025-12-26 11:00:03 +08:00

members.py

feat: implement workspace permission checks for member invitations an… (#31202)

2026-01-25 21:21:58 -08:00

model_providers.py

refactor: port reqparse to Pydantic model (#28913)

2025-11-30 16:09:42 +09:00

models.py

fix: fix available_credentials is empty (#29521)

2025-12-12 09:51:55 +08:00

plugin.py

feat: add editing support for trigger subscriptions (#29957)

2025-12-24 19:15:54 +08:00

tool_providers.py

security: fix IDOR and privilege escalation in set_default_provider

2026-01-26 16:01:06 -08:00

trigger_providers.py

refactor: split changes for api/controllers/console/workspace/trigger… (#30627)

2026-01-07 21:18:02 +08:00

workspace.py

feat: implement workspace permission checks for member invitations an… (#31202)

2026-01-25 21:21:58 -08:00