[FEAT]: Manager Role Has Excessive Privileges and Requires Scope Reduction

Author: zhangga1302Created Jun 17, 2026Updated Sep 16, 2026
Labelsenhancementfeature request

What would you like to see?

Current Status: AnythingLLM currently has three roles: Admin (unrestricted access), Manager (can manage all workspaces, create accounts, etc.), and Default (can only use the system, cannot upload documents). Drawback Analysis: Among these three roles, the Manager role is somewhat redundant. While it can manage workspaces, it also has the ability to operate on workspaces created by other users, including deleting them. This overlaps partially with the Admin role and grants excessively high privileges. Recommendations: The Manager's permissions should be restricted to creating new workspaces and maintaining only the ones they have created. They should not be allowed to view or operate on workspaces created by other accounts. This ensures basic isolation and prevents the risk of accidental or malicious operations. After clicking into a workspace, users should only see the documents belonging to their own workspace; the global file list in the left sidebar should not be visible. Implement workspace-specific Developer API keys so that access is strictly limited to the user's own workspace.

Source: Mintplex-Labs/anything-llm