Derek Higgins 4610c29d1e fix(files): Enforce DELETE action permission for file deletion (#4275) ... Previously, file deletion only checked READ permission via the _lookup_file_id() method. This meant any user with READ access to a file could also delete it, making it impossible to configure read-only file access. This change adds an 'action' parameter to fetch_all() and fetch_one() in AuthorizedSqlStore, defaulting to Action.READ for backward compatibility. The openai_delete_file() method now passes Action.DELETE, ensuring proper RBAC enforcement. With this fix, access policies can now distinguish between Users who can read/list files but not delete them Closes: #4274 Signed-off-by: Derek Higgins <derekh@redhat.com> (cherry picked from commit 4ff0c25c52) # Conflicts: # llama_stack/providers/inline/files/localfs/files.py # llama_stack/providers/remote/files/s3/files.py # src/llama_stack/providers/remote/files/openai/files.py		2025-12-02 19:08:54 +00:00
..
agents	test: add unit test to ensure all config types are instantiable (#1601)	2025-03-12 22:29:58 -07:00
datasetio	chore: remove build.py (#3869)	2025-10-20 16:28:15 -07:00
eval	feat: add static embedding metadata to dynamic model listings for providers using OpenAIMixin (#3547)	2025-09-25 17:17:00 -04:00
files/s3	fix(files): Enforce DELETE action permission for file deletion (#4275)	2025-12-02 19:08:54 +00:00
inference	fix: update hard-coded google model names (backport #4212) (#4229)	2025-11-24 11:32:14 -08:00
post_training	chore: remove build.py (#3869)	2025-10-20 16:28:15 -07:00
safety	chore: remove build.py (#3869)	2025-10-20 16:28:15 -07:00
tool_runtime	feat(tools)!: substantial clean up of "Tool" related datatypes (#3627)	2025-10-02 15:12:03 -07:00
vector_io	fix: Vector store persistence across server restarts (backport #3977) (#4225)	2025-11-24 11:30:21 -08:00
__init__.py	impls -> inline, adapters -> remote (#381)	2024-11-06 14:54:05 -08:00