scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-10 03:28:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 85

fix(rbac): also gate /key/service-account/generate for org admins

Browse source 
/key/service-account/generate is in org_admin_allowed_routes (via
key_management_routes), so without this check an org admin could bypass
disable_key_generate_for_org_admin by calling the service-account
endpoint instead.
This commit is contained in:
Ryan Crabbe 2026-04-24 19:47:58 -07:00
parent 57c6a1b38b
commit 28f43a7a37
No known key found for this signature in database
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
litellm/proxy/management_endpoints/key_management_endpoints.py
View file

@ -1454,6 +1454,8 @@ async def generate_service_account_key_fn(
detail={"error": CommonProxyErrors.db_not_connected_error.value},
)
await check_org_admin_can_generate_keys(user_api_key_dict=user_api_key_dict)
await validate_team_id_used_in_service_account_request(
team_id=data.team_id,
prisma_client=prisma_client,