Skip to content

User roles OpenAI compat - #48

Merged
BuildAndDestroy merged 4 commits into
mainfrom
user-roles-openai-compat
Aug 25, 2026
Merged

BuildAndDestroy merged 4 commits into
mainfrom
user-roles-openai-compat

Conversation

@BuildAndDestroy

Copy link
Copy Markdown
Owner

No description provided.

BuildAndDestroy and others added 2 commits August 25, 2026 15:02
…essage content.

Role updates go through PATCH /api/users with last-admin protection and audit logs. Chat replies now handle Azure/GPT-5 content shapes and empty-token errors. Pin the k8s image and use gp2 for the Ollama PVC.

Co-authored-by: Cursor <cursoragent@cursor.com>
Keep the shared deployment on the public Reaper registry so this branch does not pin an AWS-account-specific image.

Co-authored-by: Cursor <cursoragent@cursor.com>
Comment thread pkg/dbconnections/admin.go Fixed
Allowlist usernames and assign roles from constants before the Mongo update. Pin the toolchain and mongo-driver so govulncheck and Trivy stop failing on known stdlib and driver CVEs.

Co-authored-by: Cursor <cursoragent@cursor.com>
Comment thread pkg/dbconnections/admin.go Fixed
…L injection.

Rebuild allowlisted usernames and query with explicit $eq so path params cannot reach UpdateOne as raw user-controlled values.

Co-authored-by: Cursor <cursoragent@cursor.com>
@BuildAndDestroy
BuildAndDestroy merged commit 48fedad into main Aug 25, 2026
8 checks passed
@BuildAndDestroy
BuildAndDestroy deleted the user-roles-openai-compat branch August 25, 2026 21:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants