Skip to content

2024-04-19: Improved security for user-uploaded documents

Compare
Choose a tag to compare
@pamelafox pamelafox released this 19 Apr 14:00
· 336 commits to main since this release
0124725

This release improves the security of the optional user upload mechanism by adding a storageUrl field to disambiguate between user-uploaded files and admin-uploaded files with the same name. Now when running manageacl.py, you must specify the full storageUrl whose ACLs require updating.
If you have an existing search index from before this release, please follow steps in README to add the new storageUrl field and backfill it to existing chunks in the index:
https://github.com/Azure-Samples/azure-search-openai-demo/blob/main/docs/deploy_features.md#enabling-user-document-upload

What's Changed

New Contributors

Full Changelog: 2024-04-10...2024-04-19