Skip to content

Prod changes - #2

Closed
andyne13 wants to merge 6 commits into
mainfrom
prod-changes
Closed

Prod changes#2
andyne13 wants to merge 6 commits into
mainfrom
prod-changes

Conversation

@andyne13

@andyne13 andyne13 commented Jul 2, 2025

Copy link
Copy Markdown
Contributor

No description provided.

@andyne13 andyne13 closed this Jul 3, 2025
dodekapod added a commit that referenced this pull request Nov 24, 2025
EnjoyBacon7 added a commit that referenced this pull request Mar 12, 2026
…s, validate file_id, guard copy_file overwrite (#1, #2, #7, #12, #13)
EnjoyBacon7 added a commit that referenced this pull request May 7, 2026
Replace all `from openrag.core.X` / `from openrag.services.X` imports
with bare `from core.X` / `from services.X` to match the pythonpath
convention (pythonpath = ./openrag in pytest.ini).

With both the installed package and the PYTHONPATH entry reachable,
the prefixed and bare forms resolve to two distinct module objects.
This breaks isinstance checks, ABC registration, and registry
lookups -- the exact bug documented in REFACTORING_DECISION_LOG.md
Phase 5D #2 for the exception shims.
andyne13 added a commit that referenced this pull request Jun 29, 2026
#10)

The capability layer offered actions the API rejects. Align the UI with the
backend so it never shows a control guaranteed to 403:

- #10 usePermissions honors SUPER_ADMIN_MODE: the admin→all-partitions bypass
  (canRead/canWrite/canManageMembers, new canConfigurePartition) only applies
  when the backend flag is on, read from /config (admin-gated query). A plain
  admin without it is treated by their actual partition role, like the API does.
- #2 documents/detail gates delete/replace on the caller's partition role and
  filters copy targets to partitions the user can write — parity with the list.
- #3 partitions GeneralTab is role-aware: read-only for non-owners (banner, no
  Save, disabled inputs); preset/model registries (admin-only) are only fetched
  for admins so a member's view doesn't fire guaranteed-403 requests.

Also fixes the partition-list role lookup (key is `partition`, not `name`) in
GeneralTab and UsersTab, which #10 would otherwise leave undefined once the
blanket is_admin bypass is gone. Mock /config exposes super_admin_mode top-level
to match api/main.py.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants