forked from invoke-ai/InvokeAI
-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
bugSomething isn't workingSomething isn't working
Description
Is there an existing issue for this problem?
- I have searched the existing issues
Install method
Invoke's Launcher
Operating system
Linux
GPU vendor
Nvidia (CUDA)
GPU model
No response
GPU VRAM
No response
Version number
feature/multiuser
Browser
No response
System Information
No response
What happened
In multiuser mode, several of the endpoints in invokeai/app/routers/boards.py fail to check that the current user has privileges to modify or delete the image board in question. These endpoints should use CurrentUserOrDefault and their underlying routines should ensure that the board is owned by the user (or that the request is being generated by the authenticated admin user).
What you expected to happen
These endpoints should respect the ownership of the boards when running in multiuser mode.
How to reproduce the problem
No response
Additional context
No response
Discord username
No response
Reactions are currently unavailable
Metadata
Metadata
Labels
bugSomething isn't workingSomething isn't working