refac

tjbck · tjbck · commit 2751a0f0b64b · 2026-03-01T19:09:10.000-06:00
diff --git a/backend/open_webui/utils/access_control/__init__.py b/backend/open_webui/utils/access_control/__init__.py
@@ -163,8 +163,8 @@ def has_connection_access(
     based on ``config.access_grants`` within the connection dict.
 
     - Admin with BYPASS_ADMIN_ACCESS_CONTROL → always allowed
-    - Empty / missing access_grants → allowed for all users
-    - Otherwise → delegates to ``has_access``
+    - Missing, None, or empty access_grants → private, admin-only
+    - access_grants has entries → delegates to ``has_access``
     """
     from open_webui.config import BYPASS_ADMIN_ACCESS_CONTROL
 
@@ -175,9 +175,6 @@ def has_connection_access(
         user_group_ids = {group.id for group in Groups.get_groups_by_member_id(user.id)}
 
     access_grants = (connection.get("config") or {}).get("access_grants", [])
-    if not access_grants:
-        return True
-
     return has_access(user.id, "read", access_grants, user_group_ids)
 
 
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "open-webui",
-	"version": "0.8.6",
+	"version": "0.8.7",
 	"private": true,
 	"scripts": {
 		"dev": "npm run pyodide:fetch && vite dev --host",

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "open-webui",`
`3`		`- "version": "0.8.6",`
	`3`	`+ "version": "0.8.7",`
`4`	`4`	`"private": true,`
`5`	`5`	`"scripts": {`
`6`	`6`	`"dev": "npm run pyodide:fetch && vite dev --host",`