feat/enh: user sharing perms

backend/open_webui/config.py

@@ -1276,6 +1276,12 @@ USER_PERMISSIONS_WORKSPACE_TOOLS_EXPORT = (
     os.environ.get("USER_PERMISSIONS_WORKSPACE_TOOLS_EXPORT", "False").lower() == "true"
 )
 
+
+USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_SHARING = (
+    os.environ.get("USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_SHARING", "False").lower()
+    == "true"
+)
+
 USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_PUBLIC_SHARING = (
     os.environ.get(
         "USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_PUBLIC_SHARING", "False"
@@ -1283,8 +1289,10 @@ USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_PUBLIC_SHARING = (
     == "true"
 )
 
-USER_PERMISSIONS_NOTES_ALLOW_PUBLIC_SHARING = (
+USER_PERMISSIONS_WORKSPACE_KNOWLEDGE_ALLOW_SHARING = (
-    os.environ.get("USER_PERMISSIONS_NOTES_ALLOW_PUBLIC_SHARING", "False").lower()
+    os.environ.get(
+        "USER_PERMISSIONS_WORKSPACE_KNOWLEDGE_ALLOW_PUBLIC_SHARING", "False"
+    ).lower()
     == "true"
 )
 
@@ -1295,6 +1303,11 @@ USER_PERMISSIONS_WORKSPACE_KNOWLEDGE_ALLOW_PUBLIC_SHARING = (
     == "true"
 )
 
+USER_PERMISSIONS_WORKSPACE_PROMPTS_ALLOW_SHARING = (
+    os.environ.get("USER_PERMISSIONS_WORKSPACE_PROMPTS_ALLOW_SHARING", "False").lower()
+    == "true"
+)
+
 USER_PERMISSIONS_WORKSPACE_PROMPTS_ALLOW_PUBLIC_SHARING = (
     os.environ.get(
         "USER_PERMISSIONS_WORKSPACE_PROMPTS_ALLOW_PUBLIC_SHARING", "False"
@@ -1302,6 +1315,12 @@ USER_PERMISSIONS_WORKSPACE_PROMPTS_ALLOW_PUBLIC_SHARING = (
     == "true"
 )
 
+
+USER_PERMISSIONS_WORKSPACE_TOOLS_ALLOW_SHARING = (
+    os.environ.get("USER_PERMISSIONS_WORKSPACE_TOOLS_ALLOW_SHARING", "False").lower()
+    == "true"
+)
+
 USER_PERMISSIONS_WORKSPACE_TOOLS_ALLOW_PUBLIC_SHARING = (
     os.environ.get(
         "USER_PERMISSIONS_WORKSPACE_TOOLS_ALLOW_PUBLIC_SHARING", "False"
@@ -1310,6 +1329,17 @@ USER_PERMISSIONS_WORKSPACE_TOOLS_ALLOW_PUBLIC_SHARING = (
 )
 
 
+USER_PERMISSIONS_NOTES_ALLOW_SHARING = (
+    os.environ.get("USER_PERMISSIONS_NOTES_ALLOW_PUBLIC_SHARING", "False").lower()
+    == "true"
+)
+
+USER_PERMISSIONS_NOTES_ALLOW_PUBLIC_SHARING = (
+    os.environ.get("USER_PERMISSIONS_NOTES_ALLOW_PUBLIC_SHARING", "False").lower()
+    == "true"
+)
+
+
 USER_PERMISSIONS_CHAT_CONTROLS = (
     os.environ.get("USER_PERMISSIONS_CHAT_CONTROLS", "True").lower() == "true"
 )
@@ -1431,10 +1461,15 @@ DEFAULT_USER_PERMISSIONS = {
         "tools_export": USER_PERMISSIONS_WORKSPACE_TOOLS_EXPORT,
     },
     "sharing": {
+        "models": USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_SHARING,
         "public_models": USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_PUBLIC_SHARING,
+        "knowledge": USER_PERMISSIONS_WORKSPACE_KNOWLEDGE_ALLOW_SHARING,
         "public_knowledge": USER_PERMISSIONS_WORKSPACE_KNOWLEDGE_ALLOW_PUBLIC_SHARING,
+        "prompts": USER_PERMISSIONS_WORKSPACE_PROMPTS_ALLOW_SHARING,
         "public_prompts": USER_PERMISSIONS_WORKSPACE_PROMPTS_ALLOW_PUBLIC_SHARING,
+        "tools": USER_PERMISSIONS_WORKSPACE_TOOLS_ALLOW_SHARING,
         "public_tools": USER_PERMISSIONS_WORKSPACE_TOOLS_ALLOW_PUBLIC_SHARING,
+        "notes": USER_PERMISSIONS_NOTES_ALLOW_SHARING,
         "public_notes": USER_PERMISSIONS_NOTES_ALLOW_PUBLIC_SHARING,
     },
     "chat": {

backend/open_webui/routers/users.py

@@ -183,10 +183,15 @@ class WorkspacePermissions(BaseModel):
 
 
 class SharingPermissions(BaseModel):
-    public_models: bool = True
+    models: bool = False
-    public_knowledge: bool = True
+    public_models: bool = False
-    public_prompts: bool = True
+    knowledge: bool = False
+    public_knowledge: bool = False
+    prompts: bool = False
+    public_prompts: bool = False
+    tools: bool = False
     public_tools: bool = True
+    notes: bool = False
     public_notes: bool = True
 
 

src/lib/components/admin/Users/Groups/EditGroupModal.svelte

@@ -49,10 +49,15 @@
 			tools_export: false
 		},
 		sharing: {
+			models: false,
 			public_models: false,
+			knowledge: false,
 			public_knowledge: false,
+			prompts: false,
 			public_prompts: false,
+			tools: false,
 			public_tools: false,
+			notes: false,
 			public_notes: false
 		},
 		chat: {

src/lib/components/admin/Users/Groups/Permissions.svelte

@@ -20,10 +20,15 @@
 			tools_export: false
 		},
 		sharing: {
+			models: false,
 			public_models: false,
+			knowledge: false,
 			public_knowledge: false,
+			prompts: false,
 			public_prompts: false,
+			tools: false,
 			public_tools: false,
+			notes: false,
 			public_notes: false
 		},
 		chat: {
@@ -214,6 +219,23 @@
 	<div>
 		<div class=" mb-2 text-sm font-medium">{$i18n.t('Sharing Permissions')}</div>
 
+		<div class="flex flex-col w-full">
+			<div class="flex w-full justify-between my-1">
+				<div class=" self-center text-xs font-medium">
+					{$i18n.t('Models Sharing')}
+				</div>
+				<Switch bind:state={permissions.sharing.models} />
+			</div>
+			{#if defaultPermissions?.sharing?.models && !permissions.sharing.models}
+				<div>
+					<div class="text-xs text-gray-500">
+						{$i18n.t('This is a default user permission and will remain enabled.')}
+					</div>
+				</div>
+			{/if}
+		</div>
+
+		{#if permissions.sharing.models}
 			<div class="flex flex-col w-full">
 				<div class="flex w-full justify-between my-1">
 					<div class=" self-center text-xs font-medium">
@@ -229,7 +251,25 @@
 					</div>
 				{/if}
 			</div>
+		{/if}
 
+		<div class="flex flex-col w-full">
+			<div class="flex w-full justify-between my-1">
+				<div class=" self-center text-xs font-medium">
+					{$i18n.t('Knowledge Sharing')}
+				</div>
+				<Switch bind:state={permissions.sharing.knowledge} />
+			</div>
+			{#if defaultPermissions?.sharing?.knowledge && !permissions.sharing.knowledge}
+				<div>
+					<div class="text-xs text-gray-500">
+						{$i18n.t('This is a default user permission and will remain enabled.')}
+					</div>
+				</div>
+			{/if}
+		</div>
+
+		{#if permissions.sharing.knowledge}
 			<div class="flex flex-col w-full">
 				<div class="flex w-full justify-between my-1">
 					<div class=" self-center text-xs font-medium">
@@ -245,7 +285,25 @@
 					</div>
 				{/if}
 			</div>
+		{/if}
 
+		<div class="flex flex-col w-full">
+			<div class="flex w-full justify-between my-1">
+				<div class=" self-center text-xs font-medium">
+					{$i18n.t('Prompts Sharing')}
+				</div>
+				<Switch bind:state={permissions.sharing.prompts} />
+			</div>
+			{#if defaultPermissions?.sharing?.prompts && !permissions.sharing.prompts}
+				<div>
+					<div class="text-xs text-gray-500">
+						{$i18n.t('This is a default user permission and will remain enabled.')}
+					</div>
+				</div>
+			{/if}
+		</div>
+
+		{#if permissions.sharing.prompts}
 			<div class="flex flex-col w-full">
 				<div class="flex w-full justify-between my-1">
 					<div class=" self-center text-xs font-medium">
@@ -261,7 +319,25 @@
 					</div>
 				{/if}
 			</div>
+		{/if}
 
+		<div class="flex flex-col w-full">
+			<div class="flex w-full justify-between my-1">
+				<div class=" self-center text-xs font-medium">
+					{$i18n.t('Tools Sharing')}
+				</div>
+				<Switch bind:state={permissions.sharing.tools} />
+			</div>
+			{#if defaultPermissions?.sharing?.tools && !permissions.sharing.tools}
+				<div>
+					<div class="text-xs text-gray-500">
+						{$i18n.t('This is a default user permission and will remain enabled.')}
+					</div>
+				</div>
+			{/if}
+		</div>
+
+		{#if permissions.sharing.tools}
 			<div class="flex flex-col w-full">
 				<div class="flex w-full justify-between my-1">
 					<div class=" self-center text-xs font-medium">
@@ -277,7 +353,25 @@
 					</div>
 				{/if}
 			</div>
+		{/if}
 
+		<div class="flex flex-col w-full">
+			<div class="flex w-full justify-between my-1">
+				<div class=" self-center text-xs font-medium">
+					{$i18n.t('Notes Sharing')}
+				</div>
+				<Switch bind:state={permissions.sharing.notes} />
+			</div>
+			{#if defaultPermissions?.sharing?.notes && !permissions.sharing.notes}
+				<div>
+					<div class="text-xs text-gray-500">
+						{$i18n.t('This is a default user permission and will remain enabled.')}
+					</div>
+				</div>
+			{/if}
+		</div>
+
+		{#if permissions.sharing.notes}
 			<div class="flex flex-col w-full">
 				<div class="flex w-full justify-between my-1">
 					<div class=" self-center text-xs font-medium">
@@ -293,6 +387,7 @@
 					</div>
 				{/if}
 			</div>
+		{/if}
 	</div>
 
 	<hr class=" border-gray-100 dark:border-gray-850" />

src/lib/components/workspace/Knowledge/CreateKnowledgeBase.svelte

@@ -116,7 +116,8 @@
 				<AccessControl
 					bind:accessControl
 					accessRoles={['read', 'write']}
-					allowPublic={$user?.permissions?.sharing?.public_knowledge || $user?.role === 'admin'}
+					share={$user?.permissions?.sharing?.knowledge || $user?.role === 'admin'}
+					sharePublic={$user?.permissions?.sharing?.public_knowledge || $user?.role === 'admin'}
 				/>
 			</div>
 		</div>

src/lib/components/workspace/Knowledge/KnowledgeBase.svelte

@@ -547,39 +547,41 @@
 		dragged = false;
 
 		const handleUploadingFileFolder = (items) => {
-			for(const item of items) {
+			for (const item of items) {
-
+				if (item.isFile) {
-				if(item.isFile) {
 					item.file((file) => {
 						uploadFileHandler(file);
-					})
+					});
 					continue;
 				}
 
 				// Not sure why you have to call webkitGetAsEntry and isDirectory seperate, but it won't work if you try item.webkitGetAsEntry().isDirectory
 				const wkentry = item.webkitGetAsEntry();
 				const isDirectory = wkentry.isDirectory;
-				if(isDirectory) {
+				if (isDirectory) {
 					// Read the directory
-					wkentry.createReader().readEntries((entries) => {
+					wkentry.createReader().readEntries(
-						handleUploadingFileFolder(entries)
+						(entries) => {
-					}, (error) => {
+							handleUploadingFileFolder(entries);
+						},
+						(error) => {
 							console.error('Error reading directory entries:', error);
-					});
+						}
+					);
 				} else {
 					toast.info($i18n.t('Uploading file...'));
 					uploadFileHandler(item.getAsFile());
 					toast.success($i18n.t('File uploaded!'));
 				}
 			}
-		}
+		};
 
 		if (e.dataTransfer?.types?.includes('Files')) {
 			if (e.dataTransfer?.files) {
 				const inputItems = e.dataTransfer?.items;
 
 				if (inputItems && inputItems.length > 0) {
-					handleUploadingFileFolder(inputItems)
+					handleUploadingFileFolder(inputItems);
 				} else {
 					toast.error($i18n.t(`File not found.`));
 				}
@@ -708,7 +710,8 @@
 		<AccessControlModal
 			bind:show={showAccessControlModal}
 			bind:accessControl={knowledge.access_control}
-			allowPublic={$user?.permissions?.sharing?.public_knowledge || $user?.role === 'admin'}
+			share={$user?.permissions?.sharing?.knowledge || $user?.role === 'admin'}
+			sharePublic={$user?.permissions?.sharing?.public_knowledge || $user?.role === 'admin'}
 			onChange={() => {
 				changeDebounceHandler();
 			}}

src/lib/components/workspace/Models/ModelEditor.svelte

@@ -591,7 +591,8 @@
 							<AccessControl
 								bind:accessControl
 								accessRoles={['read', 'write']}
-								allowPublic={$user?.permissions?.sharing?.public_models || $user?.role === 'admin'}
+								share={$user?.permissions?.sharing?.models || $user?.role === 'admin'}
+								sharePublic={$user?.permissions?.sharing?.public_models || $user?.role === 'admin'}
 							/>
 						</div>
 					</div>

src/lib/components/workspace/Prompts/PromptEditor.svelte

@@ -83,7 +83,8 @@
 	bind:show={showAccessControlModal}
 	bind:accessControl
 	accessRoles={['read', 'write']}
-	allowPublic={$user?.permissions?.sharing?.public_prompts || $user?.role === 'admin'}
+	share={$user?.permissions?.sharing?.prompts || $user?.role === 'admin'}
+	sharePublic={$user?.permissions?.sharing?.public_prompts || $user?.role === 'admin'}
 />
 
 <div class="w-full max-h-full flex justify-center">

src/lib/components/workspace/Tools/ToolkitEditor.svelte

@@ -189,7 +189,8 @@ class Tools:
 	bind:show={showAccessControlModal}
 	bind:accessControl
 	accessRoles={['read', 'write']}
-	allowPublic={$user?.permissions?.sharing?.public_tools || $user?.role === 'admin'}
+	share={$user?.permissions?.sharing?.tools || $user?.role === 'admin'}
+	sharePublic={$user?.permissions?.sharing?.public_tools || $user?.role === 'admin'}
 />
 
 <div class=" flex flex-col justify-between w-full overflow-y-auto h-full">

src/lib/components/workspace/common/AccessControl.svelte

@@ -15,17 +15,18 @@
 	export let accessRoles = ['read'];
 	export let accessControl = {};
 
-	export let allowPublic = true;
+	export let share = true;
+	export let sharePublic = true;
 
 	let selectedGroupId = '';
 	let groups = [];
 
-	$: if (!allowPublic && accessControl === null) {
+	$: if (!sharePublic && accessControl === null) {
 		initPublicAccess();
 	}
 
 	const initPublicAccess = () => {
-		if (!allowPublic && accessControl === null) {
+		if (!sharePublic && accessControl === null) {
 			accessControl = {
 				read: {
 					group_ids: [],
@@ -125,7 +126,7 @@
 					}}
 				>
 					<option class=" text-gray-700" value="private" selected>{$i18n.t('Private')}</option>
-					{#if allowPublic}
+					{#if share && sharePublic}
 						<option class=" text-gray-700" value="public" selected>{$i18n.t('Public')}</option>
 					{/if}
 				</select>
@@ -140,6 +141,8 @@
 			</div>
 		</div>
 	</div>
+
+	{#if share}
 		{#if accessControl !== null}
 			{@const accessGroups = groups.filter((group) =>
 				(accessControl?.read?.group_ids ?? []).includes(group.id)
@@ -243,9 +246,9 @@
 											class=" rounded-full p-1 hover:bg-gray-100 dark:hover:bg-gray-850 transition"
 											type="button"
 											on:click={() => {
-											accessControl.read.group_ids = (accessControl?.read?.group_ids ?? []).filter(
+												accessControl.read.group_ids = (
-												(id) => id !== group.id
+													accessControl?.read?.group_ids ?? []
-											);
+												).filter((id) => id !== group.id);
 												accessControl.write.group_ids = (
 													accessControl?.write?.group_ids ?? []
 												).filter((id) => id !== group.id);
@@ -268,4 +271,5 @@
 				</div>
 			</div>
 		{/if}
+	{/if}
 </div>

src/lib/components/workspace/common/AccessControlModal.svelte

@@ -9,7 +9,9 @@
 	export let show = false;
 	export let accessControl = {};
 	export let accessRoles = ['read'];
-	export let allowPublic = true;
+
+	export let share = true;
+	export let sharePublic = true;
 
 	export let onChange = () => {};
 </script>
@@ -31,7 +33,7 @@
 		</div>
 
 		<div class="w-full px-5 pb-4 dark:text-white">
-			<AccessControl bind:accessControl {onChange} {accessRoles} {allowPublic} />
+			<AccessControl bind:accessControl {onChange} {accessRoles} {share} {sharePublic} />
 		</div>
 	</div>
 </Modal>