mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-17 23:51:30 +00:00
a187cb9886
The MCP gateway resolved a caller's allowed servers and per-server tool allowlists from the key, the team, the end user and the agent, but never from the internal user row, so an admin had no way to bound what a person may call across every key they hold. Anything the key allowed went through The internal user now carries the same object_permission an admin already attaches to a key or a team, and the resolver applies it as a ceiling: the caller ends up with the intersection of what the key allows and what the user allows, so adding a user entitlement can only narrow, never widen. A level that names no server and no tool places no ceiling, which keeps every existing deployment on its current behavior /user/new and /user/update accept object_permission and reuse the same create-or-update helper the team endpoints use, so the row is written once and the three cached views of it (the user row, the object-permission link and the permission itself) are invalidated on write. Clearing it with an empty object now really unlinks the permission instead of being swallowed as an empty value A row that cannot be read at all places no ceiling, but a row that names a permission the database cannot return denies the call rather than falling through to the wider set, so a partial outage cannot hand out access the admin withheld The users page grows the MCP servers, access groups, toolsets and per-server tool pickers the key and team pages already have. A save keeps a tool allowlist whenever an access group or toolset the admin retained could still supply that server, since an allowlist is what narrows a grant and an absent one reads as no restriction; it drops the allowlist once nothing indirect survives to supply the server, so removing a grant really removes it |
||
|---|---|---|
| .. | ||
| html_forms | ||
| admin_ui_utils.py | ||
| banner.py | ||
| cache_coordinator.py | ||
| cache_pydantic_utils.py | ||
| callback_utils.py | ||
| custom_openapi_spec.py | ||
| debug_utils.py | ||
| encrypt_decrypt_utils.py | ||
| expired_ui_session_key_cleanup_manager.py | ||
| get_routes.py | ||
| http_parsing_utils.py | ||
| json_merge_patch.py | ||
| key_rotation_manager.py | ||
| load_config_utils.py | ||
| model_listing_utils.py | ||
| openai_endpoint_utils.py | ||
| openapi_schema_compat.py | ||
| path_utils.py | ||
| performance_utils.md | ||
| performance_utils.py | ||
| proxy_rate_limit_error.py | ||
| proxy_state.py | ||
| rbac_utils.py | ||
| realtime_utils.py | ||
| reset_budget_job.py | ||
| resource_ownership.py | ||
| static_asset_utils.py | ||
| swagger_utils.py | ||
| timezone_utils.py | ||
| user_api_key_cache.py | ||