Mrunmayee Daware e979bd0ecf fix(proxy): authorize the public name of a team-scoped model on batch retrieve/cancel (#47067) ... * fix(proxy): authorize the public name of a team-scoped model on batch retrieve/cancel A unified batch id resolves to the deployment's internal model_name (model_name_{team_id}_{uuid}), which is in no key or team allowlist, so authorize_model_for_key always denied and team keys got 403 retrieving or cancelling their own batches. Authorize against model_info team_public_model_name when the resolved deployment is team-scoped, falling back to the resolved name otherwise. Fixes #46958 * fix(proxy): authorize team-scoped batch models by their public name on both auth paths * fix(proxy): accept the owning team's public name for its own team deployment on every auth path Managed batch, file, fine-tuning, vector store, character and video ids resolve to the team deployment's internal name again, so teams that granted the internal name keep access. The model access check now also accepts the owning team's public name and its legacy team aliases for that internal name, and only when the caller's team owns the deployment. * fix(proxy): match a team deployment's public and alias names against the caller's own grants --------- Co-authored-by: mateo-berri <277851410+mateo-berri@users.noreply.github.com>		2026-10-18 07:18:11 +00:00
..
__init__.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
test_admin_viewer_handler_access.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_auth_checks.py	fix(scim): write a group's roster in one locked transaction instead of one member at a time (#45197)	2026-10-15 10:57:00 -07:00
test_auth_checks_object_access_and_lookup.py	fix(auth): return a generic 401 for an unknown key (#39787)	2026-10-15 01:05:25 -07:00
test_auth_exception_handler.py	fix(auth): return a generic 401 for an unknown key (#39787)	2026-10-15 01:05:25 -07:00
test_auth_hot_path_network_requests.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_auth_object_prefetch.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_auth_utils.py	fix(proxy): authorize the public name of a team-scoped model on batch retrieve/cancel (#47067)	2026-10-18 07:18:11 +00:00
test_authorization.py	fix(proxy): share ownership permissions for spend logs and traces (#44239)	2026-10-03 01:38:54 +00:00
test_banned_params_extra_body.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_cli_auth.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_custom_auth_end_user_budget.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_default_end_user_budget_simple.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_fallback_budget.py	fix(router): report fallbacks skipped for access or budget instead of calling them failed (#46291)	2026-10-14 15:08:47 -07:00
test_fallback_model_access.py	fix(proxy): enforce fallback model access by default (#46127)	2026-10-13 07:58:53 -07:00
test_handle_jwt.py	fix(rag)!: use team provider credentials and allow viewer and JWT team access (#45497)	2026-10-17 23:51:48 +00:00
test_info_routes.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_jwt.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_litellm_license.py	fix(proxy): stop logging license values during verification (#44956)	2026-10-06 17:05:07 -07:00
test_login_utils.py	fix(ui): take the dashboard's user role and identity from the server (#47025)	2026-10-17 14:39:33 -07:00
test_master_key_boot_check.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_mcp_ip_filtering.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_model_access_group_budgets.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_model_checks.py	fix(providers): route Azure Responses past dated api versions, count Grok reasoning tokens on azure_ai, refresh provider sets after register_model, fix gpt-6.1-sol Azure rows (#46377)	2026-10-16 15:23:46 -07:00
test_model_checks_fallbacks.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_models_fallback_endpoint.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
test_multi_budget_windows.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_multipart_bypass_repro.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
test_network.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_oauth2_proxy_hook.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_object_permission_loading.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_onboarding.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_organization_budget_enforcement.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_password_hashing.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_password_policy.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_personal_key_team_model_access.py	feat(proxy): let personal keys inherit model access from the owner's current teams (#43692)	2026-10-13 00:17:35 +00:00
test_proxy_routes.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_rds_iam_token.py	fix(proxy): preserve AWS session tokens for RDS IAM auth (#46559)	2026-10-15 22:51:39 +00:00
test_resolvers_exceptions.py	fix(auth): return a generic 401 for an unknown key (#39787)	2026-10-15 01:05:25 -07:00
test_resolvers_grants.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_resolvers_models.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_resolvers_seam.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_resolvers_store.py	fix(auth): return a generic 401 for an unknown key (#39787)	2026-10-15 01:05:25 -07:00
test_route_checks.py	fix(ui): take the dashboard's user role and identity from the server (#47025)	2026-10-17 14:39:33 -07:00
test_router_override_fallback_auth.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_search_tool_deny_by_default.py	feat(auth): deny search tools by default when search_tool_deny_by_default is set (#44490)	2026-10-06 12:50:26 -07:00
test_team_grants.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_team_member_budget.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_unmapped_model_budget_enforcement.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_user_api_key_auth.py	feat(realtime): proxy OpenAI Live sessions on /v1/live/sessions (#43621)	2026-10-13 13:59:27 -07:00
test_user_api_key_auth_request_flow.py	fix(jwt): honor end_user_id_jwt_field on the JWT-to-virtual-key mapped path (#46637)	2026-10-15 16:57:23 +00:00