scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-11-13 08:52:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 175

fix(proxy): avoid C901 growth on get_spend_routes update/regenerate gates

Browse source 
Call the shared refuse helper unconditionally; default permissions={} is
inert and only a truthy get_spend_routes trips the Enterprise 403. Drops
the model_fields_set if-wrappers that pushed C901 past the merge-base
ceiling.
This commit is contained in:
er-s-an 2026-10-18 09:29:07 +08:00
parent 9d8d17ec1a
commit 0a86bdabdb
1 changed files with 3 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
litellm/proxy/management_endpoints/key_management_endpoints.py
View file

@ -3555,8 +3555,8 @@ async def _validate_update_key_data(
# Reject NaN/±inf spend before it can reach the DB / spend counter.
validate_finite_spend(data.spend)
if "permissions" in data.model_fields_set:
_refuse_get_spend_routes_unless_premium(data.permissions, premium_user)
# Default permissions={} is inert; only a truthy get_spend_routes trips the gate.
_refuse_get_spend_routes_unless_premium(data.permissions, premium_user)
validate_budget_duration(data.budget_duration)
_is_proxy_admin: Final = user_api_key_dict.user_role == LitellmUserRoles.PROXY_ADMIN.value
@ -6381,8 +6381,7 @@ async def regenerate_key_fn(
data=data,
user_api_key_dict=user_api_key_dict,
)
if "permissions" in data.model_fields_set:
_refuse_get_spend_routes_unless_premium(data.permissions, premium_user)
_refuse_get_spend_routes_unless_premium(data.permissions, premium_user)
# Mirror /key/generate's post-handle_key_type recheck so a
# non-admin can't elevate via a key_type preset that the
# regenerate flow would otherwise carry through unchecked.