Negative authorization test

Open WebUI Security Baseline: Patch, Isolate, And Test Tool Permissions

Assess Open WebUI patch scope and ordinary-user access to chats, files, retrieval collections and tools. Test backend denials separately from visible interface controls, using synthetic data and harmless actions.