6 views
-/https://github.com/berriai/litellm/issues/27005
GitHub ยท issue

#27005 [Bug]: Non-admin team admins cannot save Key Edit Settings โ€” UI sends `allowed_routes`, but `UpdateKeyRequest` has no `key_type` to fall back to

  • State: open
  • Author: @marty-sullivan
  • Labels: bug, proxy

### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

On v1.83.10-stable, an `internal_user` who is admin of a team cannot save changes to an existing team key via the UI's Edit Settings panel. The save fails with 403:

```json {"error": "Only proxy admins can set `allowed_routes` on a key. Use `key_type` to pick a preset route bucket instead."} ```

This happens even when the user did not touch the Key Type field โ€” the form always submits the current `allowed_routes` value.

The error message's suggested workaround ("use `key_type` instead") is not actionable: `UpdateKeyRequest` does not have a `key_type` field, and the UI does not send one.

### Affected versions

- v1.83.10 (and presumably the entire v1.83.7+ line where PR #25445 first shipped) - Verified still broken on `litellm_internal_staging` tip as of commit `b1fcdb671` โ€” the strict check in `_validate_update_key_data` and the absence of `key_type` on `UpdateKeyRequest` are unchanged

### Affected user roles

`INTERNAL_USER`, team admins, `ORG_ADMIN` โ€” anyone whose `user_role != PROXY_ADMIN`. The Greptile reviewer on PR #25445 explicitly โ€ฆ

GitHub resolver

Import GitHub neighbors on demand. Results are saved as system ingests.

Refresh page
vote history (1 events)
#0 of 0 ยท 31d17h45m42s ago โ€” entered ยท #import:https:::github.com:berriai:litellm post #3103
The right issue is harder because it spans protocol translation, state encoding across requests, hosted-tool integration, separate streaming and non-streaming control flows, and error propagation, requiring broader debugging and regression coverage than the narrower request-validation and UI contract change.
discussed in #import:https:::github.com:berriai:litellm

ranked child groups

no voted pairs yet in this scope

cli
src
spread
search