From a89a9c0f6b4fe51f4f029c0db0751e3813c06eb2 Mon Sep 17 00:00:00 2001
From: mamadoudicko <mamadoudicko100@gmail.com>
Date: Tue, 26 Sep 2023 14:22:45 +0200
Subject: [PATCH] fix(RBAC): skip validation for unplug

---
 backend/routes/chat_routes.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/backend/routes/chat_routes.py b/backend/routes/chat_routes.py
index f0919a235..953ce217a 100644
--- a/backend/routes/chat_routes.py
+++ b/backend/routes/chat_routes.py
@@ -195,6 +195,13 @@ async def create_question_handler(
         )
 
     # Retrieve user's OpenAI API key
+    if brain_id:
+        validate_brain_authorization(
+            brain_id=brain_id,
+            user_id=current_user.id,
+            required_roles=[RoleEnum.Viewer, RoleEnum.Editor, RoleEnum.Owner],
+        )
+
     current_user.openai_api_key = request.headers.get("Openai-Api-Key")
     brain = Brain(id=brain_id)
     brain_details: BrainEntity | None = None