mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-14 23:21:35 +00:00
dd6a6e2fdf
A key restricted to one agent inside a team restricted to another intersected to an empty list, and every caller read an empty list as 'no restrictions set', so adding the second restriction handed the key every agent on the proxy. The same empty list came out of the except blocks around the permission lookups, so a database outage widened access the same way. Resolution now returns a tagged union of unrestricted, restricted to a concrete set, or unresolvable, and the callers match on it: a restricted caller with no agents left reaches none, and a grant that cannot be read denies rather than allows. Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| auth | ||
| __init__.py | ||
| test_a2a_endpoints.py | ||
| test_a2a_version_e2e.py | ||
| test_agent_header_isolation.py | ||
| test_agent_headers.py | ||
| test_agent_registry.py | ||
| test_databricks_oauth.py | ||
| test_endpoints.py | ||
| test_model_list_helpers.py | ||