mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-12 23:01:41 +00:00
774444fcd7
Some checks failed
LiteLLM Rust / rustfmt, clippy, test (push) Has been cancelled
Terraform Modules / fmt, validate, test (aws) (push) Has been cancelled
Terraform Provider / gofmt, vet, build, test (push) Has been cancelled
Terraform Provider / Provider endpoints vs proxy OpenAPI schema (push) Has been cancelled
Team member permission writes previously accepted every
KeyManagementRoutes value (and /team/permissions_update accepted any
string at all), but only nine of those grants are ever read by the
permission checks; values like /key/block or /key/bulk_update guard
admin-only endpoints and the templated /key/{key_id}/... entries are
enforced under their plain counterparts, so granting them silently did
nothing. A new TeamMemberPermissions enum narrows the write surfaces
(default team settings, /team/permissions_update,
/team/permissions_bulk_update) to the nine enforced grants plus the
always-included /key/info and /key/health, /team/permissions_list now
advertises only the nine grantable values, and the default team
settings form derives its checkboxes from the new enum
BREAKING CHANGE: PATCH /update/default_team_settings,
POST /team/permissions_update, POST /team/permissions_bulk_update, and
litellm_settings.default_team_params now reject team member permission
values that were never enforced: /key/block, /key/unblock,
/key/bulk_update, /team/key/bulk_update, /key/{key_id}/regenerate,
/key/{key_id}/reset_spend, /key/aliases, /spend/logs/v2. Stored values
are unaffected and still read back
|
||
|---|---|---|
| .. | ||
| litellm-dashboard | ||
| Dockerfile | ||
| nginx.conf | ||