[PR #2338] [MERGED] feat(security): Support System User Protection API with security migration (V3.38) #2440

New issue

Closed

opened 2026-10-28 21:09:49 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-28 21:09:49 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/ComfyUI-Manager/pull/2338
Author: @ltdrdata
Created: 12/2/2025
Status: ✅ Merged
Merged: 12/2/2025
Merged by: @ltdrdata

Base: main ← Head: security/userdata

📝 Commits (1)

e44c5ce feat(security): Support System User Protection API with security migration (V3.38)

📊 Changes

13 files changed (+780 additions, -61 deletions)

View changed files

📝 README.md (+22 -14)
➕ docs/en/v3.38-userdata-security-migration.md (+230 -0)
📝 glob/manager_core.py (+12 -6)
➕ glob/manager_migration.py (+356 -0)
📝 glob/manager_server.py (+48 -6)
📝 js/cm-api.js (+3 -3)
📝 js/comfyui-manager.js (+35 -5)
📝 js/common.js (+28 -12)
📝 js/custom-nodes-manager.js (+11 -2)
📝 js/model-manager.js (+13 -4)
📝 js/snapshot.js (+5 -5)
📝 prestartup_script.py (+16 -3)
📝 pyproject.toml (+1 -1)

📄 Description

Migrate Manager data path: default/ComfyUI-Manager → __manager
Force security_level=strong on outdated ComfyUI (block installations)
Auto-migrate config.ini only; backup legacy files for manual verification
Raise weak/normal- to normal during migration
Add /manager/startup_alerts API for UI warnings
Differentiate 403 responses: comfyui_outdated vs security_level
Block startup scripts execution on old ComfyUI

Requires ComfyUI v0.3.76+ for full functionality.
Backward compatible with older versions (uses legacy path).

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/ComfyUI-Manager/pull/2338 **Author:** [@ltdrdata](https://github.com/ltdrdata) **Created:** 12/2/2025 **Status:** ✅ Merged **Merged:** 12/2/2025 **Merged by:** [@ltdrdata](https://github.com/ltdrdata) **Base:** `main` ← **Head:** `security/userdata` --- ### 📝 Commits (1) - [`e44c5ce`](https://github.com/Comfy-Org/ComfyUI-Manager/commit/e44c5cef58fb4973670b86433b9d24d077b44a26) feat(security): Support System User Protection API with security migration (V3.38) ### 📊 Changes **13 files changed** (+780 additions, -61 deletions) <details> <summary>View changed files</summary> 📝 `README.md` (+22 -14) ➕ `docs/en/v3.38-userdata-security-migration.md` (+230 -0) 📝 `glob/manager_core.py` (+12 -6) ➕ `glob/manager_migration.py` (+356 -0) 📝 `glob/manager_server.py` (+48 -6) 📝 `js/cm-api.js` (+3 -3) 📝 `js/comfyui-manager.js` (+35 -5) 📝 `js/common.js` (+28 -12) 📝 `js/custom-nodes-manager.js` (+11 -2) 📝 `js/model-manager.js` (+13 -4) 📝 `js/snapshot.js` (+5 -5) 📝 `prestartup_script.py` (+16 -3) 📝 `pyproject.toml` (+1 -1) </details> ### 📄 Description - Migrate Manager data path: default/ComfyUI-Manager → __manager - Force security_level=strong on outdated ComfyUI (block installations) - Auto-migrate config.ini only; backup legacy files for manual verification - Raise weak/normal- to normal during migration - Add /manager/startup_alerts API for UI warnings - Differentiate 403 responses: comfyui_outdated vs security_level - Block startup scripts execution on old ComfyUI Requires ComfyUI v0.3.76+ for full functionality. Backward compatible with older versions (uses legacy path). --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-28 21:09:49 +00:00