From 2a8fe32850a7fef65f305bfaa08923dd6e513d97 Mon Sep 17 00:00:00 2001 From: user <70670632+stuxf@users.noreply.github.com> Date: Sat, 2 May 2026 02:32:01 +0000 Subject: [PATCH] fix(types): add /team/permissions_bulk_update to management_routes MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The blocklist check in _check_proxy_admin_viewer_access only fires for routes that match LiteLLMRoutes.management_routes — the bulk-update endpoint was missing from that list, so the test for view-only admins on /team/permissions_bulk_update fell through to "allow." Co-Authored-By: Claude Opus 4.7 (1M context) --- litellm/proxy/_types.py | 1 + 1 file changed, 1 insertion(+) diff --git a/litellm/proxy/_types.py b/litellm/proxy/_types.py index 3cca23f07ab..3c16f6fdda7 100644 --- a/litellm/proxy/_types.py +++ b/litellm/proxy/_types.py @@ -565,6 +565,7 @@ class LiteLLMRoutes(enum.Enum): "/team/available", "/team/permissions_list", "/team/permissions_update", + "/team/permissions_bulk_update", "/team/daily/activity", # model "/model/new",