mirror of
https://github.com/meta-llama/llama-stack.git
synced 2025-12-21 05:58:40 +00:00
5abb7df41a
Vector store operations were bypassing ABAC checks by calling providers directly instead of going through the routing table. This allowed unauthorized access to vector store data and operations. Changes: o Route all VectorIORouter methods through routing table instead of directly to providers o Update routing table to enforce ABAC checks on all vector store operations (read, update, delete) o Add test suite verifying ABAC enforcement for all vector store operations o Ensure providers are never called when authorization fails Fixes security issue where users could access vector stores they don't have permission for. Fixes: #4393 Signed-off-by: Derek Higgins <derekh@redhat.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| datasets.py | ||
| eval_scoring.py | ||
| inference.py | ||
| safety.py | ||
| tool_runtime.py | ||
| vector_io.py | ||