Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
chenpangpang
open-webui
Commits
68ed24b7
Unverified
Commit
68ed24b7
authored
Feb 10, 2024
by
Timothy Jaeryang Baek
Committed by
GitHub
Feb 10, 2024
Browse files
Merge pull request #701 from ollama-webui/fix
fix: admin issue
parents
e5863d37
3af8d16e
Changes
2
Show whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
9 additions
and
7 deletions
+9
-7
backend/apps/web/routers/users.py
backend/apps/web/routers/users.py
+2
-4
backend/utils/utils.py
backend/utils/utils.py
+7
-3
No files found.
backend/apps/web/routers/users.py
View file @
68ed24b7
...
...
@@ -32,9 +32,8 @@ async def get_users(skip: int = 0, limit: int = 50, user=Depends(get_admin_user)
@
router
.
post
(
"/update/role"
,
response_model
=
Optional
[
UserModel
])
async
def
update_user_role
(
form_data
:
UserRoleUpdateForm
,
user
=
Depends
(
get_admin_user
)
):
async
def
update_user_role
(
form_data
:
UserRoleUpdateForm
,
user
=
Depends
(
get_admin_user
)):
if
user
.
id
!=
form_data
.
id
:
return
Users
.
update_user_role_by_id
(
form_data
.
id
,
form_data
.
role
)
...
...
@@ -115,4 +114,3 @@ async def delete_user_by_id(user_id: str, user=Depends(get_admin_user)):
status_code
=
status
.
HTTP_403_FORBIDDEN
,
detail
=
ERROR_MESSAGES
.
ACTION_PROHIBITED
,
)
backend/utils/utils.py
View file @
68ed24b7
...
...
@@ -58,7 +58,9 @@ def extract_token_from_auth_header(auth_header: str):
return
auth_header
[
len
(
"Bearer "
)
:]
def
get_current_user
(
auth_token
:
HTTPAuthorizationCredentials
=
Depends
(
bearer_security
)):
def
get_current_user
(
auth_token
:
HTTPAuthorizationCredentials
=
Depends
(
bearer_security
),
):
data
=
decode_token
(
auth_token
.
credentials
)
if
data
!=
None
and
"id"
in
data
:
user
=
Users
.
get_user_by_id
(
data
[
"id"
])
...
...
@@ -75,17 +77,19 @@ def get_current_user(auth_token: HTTPAuthorizationCredentials = Depends(bearer_s
)
def
get_verified_user
(
user
:
Users
=
Depends
(
get_current_user
)):
def
get_verified_user
(
user
=
Depends
(
get_current_user
)):
if
user
.
role
not
in
{
"user"
,
"admin"
}:
raise
HTTPException
(
status_code
=
status
.
HTTP_401_UNAUTHORIZED
,
detail
=
ERROR_MESSAGES
.
ACCESS_PROHIBITED
,
)
return
user
def
get_admin_user
(
user
:
Users
=
Depends
(
get_current_user
)):
def
get_admin_user
(
user
=
Depends
(
get_current_user
)):
if
user
.
role
!=
"admin"
:
raise
HTTPException
(
status_code
=
status
.
HTTP_401_UNAUTHORIZED
,
detail
=
ERROR_MESSAGES
.
ACCESS_PROHIBITED
,
)
return
user
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment