Classic298 ea058841c9 fix: check destination calendar write access on event update (#24764) ...

update_event only verified write access on the event's source calendar.
CalendarEventUpdateForm accepts a new calendar_id which the model layer
applies unconditionally, so a user with write access to their own calendar
could move (inject) an event into any other user's calendar. Mirror the
destination check create_event already performs.

2026-05-19 21:26:58 +04:00

..

data

refac: mv backend files to /open_webui dir

2024-09-04 16:54:48 +02:00

internal

refac: modernize type annotations (PEP 604 / PEP 585)

2026-05-12 17:10:15 +09:00

migrations

fix: tag composite pk in migration (#24722)

2026-05-15 09:31:27 +09:00

models

refactor: remove unused DELETE /chats/{id}/tags/all endpoint (#24785)

2026-05-19 21:03:58 +04:00

retrieval

fix: pass subscription_key and endpoint in bing.py CLI search_bing() call (#24768)

2026-05-19 21:26:10 +04:00

routers

fix: check destination calendar write access on event update (#24764)

2026-05-19 21:26:58 +04:00

socket

refac

2026-05-13 12:44:12 +09:00

static

refac

2026-05-12 03:04:35 +09:00

storage

refac: modernize type annotations (PEP 604 / PEP 585)

2026-05-12 17:10:15 +09:00

tools

refac

2026-05-14 03:10:48 +09:00

utils

refac

2026-05-19 21:03:23 +04:00

__init__.py

refac

2026-05-09 02:38:08 +09:00

alembic.ini

fix: Alembic CLI commands from failing

2025-08-15 04:17:47 -04:00

config.py

refac: modernize type annotations (PEP 604 / PEP 585)

2026-05-12 17:10:15 +09:00

constants.py

refac: modernize type annotations (PEP 604 / PEP 585)

2026-05-12 17:10:15 +09:00

env.py

refac

2026-05-14 02:56:44 +09:00

functions.py

refac: modernize type annotations (PEP 604 / PEP 585)

2026-05-12 17:10:15 +09:00

main.py

refac

2026-05-19 20:51:53 +04:00

tasks.py

refac: modernize type annotations (PEP 604 / PEP 585)

2026-05-12 17:10:15 +09:00