mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-16 23:41:43 +00:00
0fcd0f99f9
These three files assert that a denied role renders the admin-only notice and issues no request. They were written when useCan read only the session role, so a denied render genuinely touched the network zero times. useCan then grew a useIsOrgAdmin leg, which reads useOrganizations, so every capability check now issues GET /organization/list regardless of the role or the capability. Both changes landed the same afternoon and were green on their own bases, so the break only appeared once they were merged. Stubbing useOrganizations keeps the zero-request assertion exact instead of loosening it to ignore whatever else the page happens to fetch. It also leaves isOrgAdminSessionRole running for real, so the Org Admin case still proves that a genuine org admin is refused rather than an ordinary user. |
||
|---|---|---|
| .. | ||
| litellm-dashboard | ||
| Dockerfile | ||
| nginx.conf | ||