The _system user is a read-only account that owns global LLM Service Definitions but should not actively send requests. Previously, no explicit validation prevented this.

Changes

Validation Layer

• Added ValidateNotSystemUser() in internal/handlers/validation.go returning 403 Forbidden for _system user
• Applied validation to all write/delete handlers:
  • Similarity requests (GET/POST similars)
  • Embeddings (POST/DELETE embeddings)
  • Projects (PUT/POST/DELETE projects)
  • Users (PUT/POST/DELETE users)
  • LLM Service Definitions (PUT/POST/DELETE definitions)
  • LLM Service Instances (PUT/POST/DELETE instances)

Tests

• Unit tests for validation function (3 cases)
• Integration tests covering all 13 protected endpoints

Example

func putProjectFunc(ctx context.Context, input *models.PutProjectRequest) (*models.UploadProjectResponse, error) {
    // Validate that _system user cannot send requests
    if err := ValidateNotSystemUser(input.UserHandle); err != nil {
        return nil, err
    }
    // ... rest of handler
}

Requests from _system now return:

HTTP 403 Forbidden
{"detail": "_system user cannot send requests - this is a read-only account"}

Read operations and admin-managed resources for _system remain unchanged.

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.