refac/enh: chat controls permissions

backend/open_webui/config.py

@@ -1143,10 +1143,18 @@ USER_PERMISSIONS_CHAT_CONTROLS = (
     os.environ.get("USER_PERMISSIONS_CHAT_CONTROLS", "True").lower() == "true"
 )
 
+USER_PERMISSIONS_CHAT_VALVES = (
+    os.environ.get("USER_PERMISSIONS_CHAT_VALVES", "True").lower() == "true"
+)
+
 USER_PERMISSIONS_CHAT_SYSTEM_PROMPT = (
     os.environ.get("USER_PERMISSIONS_CHAT_SYSTEM_PROMPT", "True").lower() == "true"
 )
 
+USER_PERMISSIONS_CHAT_PARAMS = (
+    os.environ.get("USER_PERMISSIONS_CHAT_PARAMS", "True").lower() == "true"
+)
+
 USER_PERMISSIONS_CHAT_FILE_UPLOAD = (
     os.environ.get("USER_PERMISSIONS_CHAT_FILE_UPLOAD", "True").lower() == "true"
 )
@@ -1232,7 +1240,9 @@ DEFAULT_USER_PERMISSIONS = {
     },
     "chat": {
         "controls": USER_PERMISSIONS_CHAT_CONTROLS,
+        "valves": USER_PERMISSIONS_CHAT_VALVES,
         "system_prompt": USER_PERMISSIONS_CHAT_SYSTEM_PROMPT,
+        "params": USER_PERMISSIONS_CHAT_PARAMS,
         "file_upload": USER_PERMISSIONS_CHAT_FILE_UPLOAD,
         "delete": USER_PERMISSIONS_CHAT_DELETE,
         "edit": USER_PERMISSIONS_CHAT_EDIT,

backend/open_webui/routers/users.py

@@ -134,7 +134,9 @@ class SharingPermissions(BaseModel):
 
 class ChatPermissions(BaseModel):
     controls: bool = True
+    valves: bool = True
     system_prompt: bool = True
+    params: bool = True
     file_upload: bool = True
     delete: bool = True
     edit: bool = True

src/lib/components/admin/Users/Groups.svelte

@@ -66,7 +66,9 @@
 		},
 		chat: {
 			controls: true,
+			valves: true,
 			system_prompt: true,
+			params: true,
 			file_upload: true,
 			delete: true,
 			edit: true,

src/lib/components/admin/Users/Groups/EditGroupModal.svelte

@@ -48,10 +48,20 @@
 		},
 		chat: {
 			controls: true,
+			valves: true,
+			system_prompt: true,
+			params: true,
 			file_upload: true,
 			delete: true,
 			edit: true,
-			temporary: true
+			share: true,
+			export: true,
+			stt: true,
+			tts: true,
+			call: true,
+			multiple_models: true,
+			temporary: true,
+			temporary_enforced: false
 		},
 		features: {
 			direct_tool_servers: false,

src/lib/components/admin/Users/Groups/Permissions.svelte

@@ -21,6 +21,9 @@
 		},
 		chat: {
 			controls: true,
+			valves: true,
+			system_prompt: true,
+			params: true,
 			file_upload: true,
 			delete: true,
 			edit: true,
@@ -263,6 +266,14 @@
 			<Switch bind:state={permissions.chat.controls} />
 		</div>
 
+		<div class="  flex w-full justify-between my-2 pr-2">
+			<div class=" self-center text-xs font-medium">
+				{$i18n.t('Allow Chat Valves')}
+			</div>
+
+			<Switch bind:state={permissions.chat.valves} />
+		</div>
+
 		<div class="  flex w-full justify-between my-2 pr-2">
 			<div class=" self-center text-xs font-medium">
 				{$i18n.t('Allow Chat System Prompt')}
@@ -271,6 +282,14 @@
 			<Switch bind:state={permissions.chat.system_prompt} />
 		</div>
 
+		<div class="  flex w-full justify-between my-2 pr-2">
+			<div class=" self-center text-xs font-medium">
+				{$i18n.t('Allow Chat Params')}
+			</div>
+
+			<Switch bind:state={permissions.chat.params} />
+		</div>
+
 		<div class="  flex w-full justify-between my-2 pr-2">
 			<div class=" self-center text-xs font-medium">
 				{$i18n.t('Allow Chat Delete')}

src/lib/components/chat/Controls/Controls.svelte

@@ -30,6 +30,7 @@
 		</button>
 	</div>
 
+	{#if $user?.role === 'admin' || ($user?.permissions.chat?.controls ?? true)}
 		<div class=" dark:text-gray-200 text-sm font-primary py-0.5 px-0.5">
 			{#if chatFiles.length > 0}
 				<Collapsible title={$i18n.t('Files')} open={true} buttonClassName="w-full">
@@ -61,11 +62,13 @@
 				<hr class="my-2 border-gray-50 dark:border-gray-700/10" />
 			{/if}
 
+			{#if $user?.role === 'admin' || ($user?.permissions.chat?.valves ?? true)}
 				<Collapsible bind:open={showValves} title={$i18n.t('Valves')} buttonClassName="w-full">
 					<div class="text-sm" slot="content">
 						<Valves show={showValves} />
 					</div>
 				</Collapsible>
+			{/if}
 
 			{#if $user?.role === 'admin' || ($user?.permissions.chat?.system_prompt ?? true)}
 				<hr class="my-2 border-gray-50 dark:border-gray-700/10" />
@@ -84,7 +87,7 @@
 				</Collapsible>
 			{/if}
 
-		{#if $user?.role === 'admin' || ($user?.permissions.chat?.controls ?? true)}
+			{#if $user?.role === 'admin' || ($user?.permissions.chat?.params ?? true)}
 				<hr class="my-2 border-gray-50 dark:border-gray-700/10" />
 
 				<Collapsible title={$i18n.t('Advanced Params')} open={true} buttonClassName="w-full">
@@ -96,4 +99,5 @@
 				</Collapsible>
 			{/if}
 		</div>
+	{/if}
 </div>

src/lib/components/chat/Navbar.svelte

@@ -151,6 +151,7 @@
 						</Menu>
 					{/if}
 
+					{#if $user?.role === 'admin' || ($user?.permissions.chat?.controls ?? true)}
 						<Tooltip content={$i18n.t('Controls')}>
 							<button
 								class=" flex cursor-pointer px-2 py-2 rounded-xl hover:bg-gray-50 dark:hover:bg-gray-850 transition"
@@ -164,6 +165,7 @@
 								</div>
 							</button>
 						</Tooltip>
+					{/if}
 
 					{#if $mobile}
 						<Tooltip content={$i18n.t('New Chat')}>