Is there an existing issue for this problem?
Install method
Invoke's Launcher
Operating system
Linux
GPU vendor
Nvidia (CUDA)
GPU model
No response
GPU VRAM
No response
Version number
feature/multiuser
Browser
No response
System Information
No response
What happened
In multiuser mode, several of the endpoints in invokeai/app/routers/boards.py fail to check that the current user has privileges to modify or delete the image board in question. These endpoints should use CurrentUserOrDefault and their underlying routines should ensure that the board is owned by the user (or that the request is being generated by the authenticated admin user).
What you expected to happen
These endpoints should respect the ownership of the boards when running in multiuser mode.
How to reproduce the problem
No response
Additional context
No response
Discord username
No response
Is there an existing issue for this problem?
Install method
Invoke's Launcher
Operating system
Linux
GPU vendor
Nvidia (CUDA)
GPU model
No response
GPU VRAM
No response
Version number
feature/multiuser
Browser
No response
System Information
No response
What happened
In multiuser mode, several of the endpoints in
invokeai/app/routers/boards.pyfail to check that the current user has privileges to modify or delete the image board in question. These endpoints should useCurrentUserOrDefaultand their underlying routines should ensure that the board is owned by the user (or that the request is being generated by the authenticated admin user).What you expected to happen
These endpoints should respect the ownership of the boards when running in multiuser mode.
How to reproduce the problem
No response
Additional context
No response
Discord username
No response