mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-20 00:11:50 +00:00
65dd6b8376
An empty access grant on a logging destination now means no one can use it, for both visibility and request-time routing, regardless of auto_enable. Previously an auto_enable destination with empty access was treated as proxy-wide, an implicit allow-all that let a team-admin widen a scoped destination by emptying its grants and let a client-invisible destination fan out to every tenant. Proxy-wide export now requires an explicit access.global=true (already proxy-admin-only). Removes the auto_enable empty-access fallback from is_destination_visible and the request resolver, deletes the now-unused _has_explicit_access_grants helper, and drops the last-grant-removal guard in decide_credential_patch that only existed to contain the old widening behavior. Emptying the last grant is now allowed and simply disables the destination. auto_enable is unchanged in meaning (fires without being named, scoped by access) and the logging_exporters assignment path is untouched. UI Mode cell renders Disabled for an auto_enable destination with no access grants. |
||
|---|---|---|
| .. | ||
| litellm-dashboard | ||
| Dockerfile | ||
| nginx.conf | ||