open-webui

Files

T

Classic298 ea058841c9 fix: check destination calendar write access on event update (#24764 )

update_event only verified write access on the event's source calendar.
CalendarEventUpdateForm accepts a new calendar_id which the model layer
applies unconditionally, so a user with write access to their own calendar
could move (inject) an event into any other user's calendar. Mirror the
destination check create_event already performs.

2026-05-19 21:26:58 +04:00

data

refac: mv backend files to /open_webui dir

2024-09-04 16:54:48 +02:00

open_webui

fix: check destination calendar write access on event update (#24764 )

2026-05-19 21:26:58 +04:00

.dockerignore

…

.gitignore

refac

2024-09-06 04:59:20 +02:00