diff --git a/glob/manager_core.py b/glob/manager_core.py index 417246f9..e2b7ab97 100644 --- a/glob/manager_core.py +++ b/glob/manager_core.py @@ -23,7 +23,7 @@ import cm_global from manager_util import * -version = [2, 46, 3] +version = [2, 46, 4] version_str = f"V{version[0]}.{version[1]}" + (f'.{version[2]}' if len(version) > 2 else '') diff --git a/glob/manager_server.py b/glob/manager_server.py index 0137a37a..ef716f0b 100644 --- a/glob/manager_server.py +++ b/glob/manager_server.py @@ -985,6 +985,14 @@ async def install_model(request): model_path = get_model_path(json_data) + if not is_allowed_security_level('middle'): + print(f"ERROR: To use this action, a security_level of `middle or below` is required. Please contact the administrator.") + return web.Response(status=403) + + if not json_data['name'].endswith('.safetensors') and not is_allowed_security_level('high'): + print(f"ERROR: To use this feature, you must set '--listen' to a local IP and set the security level to 'middle' or 'weak'. Please contact the administrator.") + return web.Response(status=403) + res = False try: diff --git a/pyproject.toml b/pyproject.toml index 08d0f736..de4b03be 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,7 +1,7 @@ [project] name = "comfyui-manager" description = "ComfyUI-Manager provides features to install and manage custom nodes for ComfyUI, as well as various functionalities to assist with ComfyUI." -version = "2.46.3" +version = "2.46.4" license = "LICENSE" dependencies = ["GitPython", "PyGithub", "matrix-client==0.4.0", "transformers", "huggingface-hub>0.20", "typer", "rich", "typing-extensions"]