From d3af9090ea2fe3822aa47ad06d79ec4788cba4f7 Mon Sep 17 00:00:00 2001
From: Saifeddine ALOUI <aloui.seifeddine@gmail.com>
Date: Sun, 13 Oct 2024 15:06:28 +0200
Subject: [PATCH] added access check to uninstall app

---
 endpoints/lollms_apps.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/endpoints/lollms_apps.py b/endpoints/lollms_apps.py
index 3bc1043e..d1f44be2 100644
--- a/endpoints/lollms_apps.py
+++ b/endpoints/lollms_apps.py
@@ -394,6 +394,7 @@ async def install_app(app_name: str, auth: AuthRequest):
 
 @router.post("/uninstall/{app_name}")
 async def uninstall_app(app_name: str, auth: AuthRequest):
+    check_access(lollmsElfServer, auth.client_id)
     app_name=sanitize_path(app_name)
     app_path = lollmsElfServer.lollms_paths.apps_zoo_path / app_name
     if app_path.exists():