LibreChat/packages
Dustin Healy b590951190 fix: harden role guards, add User.role index, validate names, improve tests
- Add index on User.role field for efficient member queries at scale
- Replace fragile SystemRoles key lookup with value-based Set check (6 sites)
- Elevate rename rollback failure logging to CRITICAL (matches removeRoleMember)
- Guard removeRoleMember against non-ADMIN system roles (403 for USER)
- Fix parsePagination limit=0 gotcha: use parseInt + NaN check instead of ||
- Add control character and reserved path segment validation to role names
- Simplify validateRoleName: remove redundant casts and dead conditions
- Add JSDoc to deleteRoleByName documenting non-atomic window
- Split mixed value+type import in methods/index.ts per AGENTS.md
- Add 9 new tests: permissions assertion, combined rename+desc, createRole
  with permissions, pagination edge cases, control char/reserved name
  rejection, system role removeRoleMember guard
2026-03-27 08:24:02 -07:00
..
api fix: harden role guards, add User.role index, validate names, improve tests 2026-03-27 08:24:02 -07:00
client 📁 refactor: Prompts UI (#11570) 2026-03-22 16:56:22 -04:00
data-provider 🎛️ feat: DB-Backed Per-Principal Config System (#12354) 2026-03-25 19:39:29 -04:00
data-schemas fix: harden role guards, add User.role index, validate names, improve tests 2026-03-27 08:24:02 -07:00