8 views
-/https://github.com/berriai/litellm/issues/29435
GitHub · issue

#29435 [Bug]: BasicAuth, when user logs in with invitation email it has role admin during that first login even though configured as internal_user

  • State: open
  • Author: @OliverKleinBST
  • Labels: bug, proxy

### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

A bug happened! At first time login a user has role admin but should have role internal user.

### Steps to Reproduce

1. login as admin to liteLLM 2. create a new user and give that user the internal_user role 3. copy the "invite user mail link" 4. logout 5. take that link and first time login to liteLLM - which asks you to create a password 6. when the user created password he is moved on to liteLLM UI --> **WITH ADMIN ROLE** 7. user logout and re-login --> now user has intended internal_user role

### Relevant log output

```shell

```

### What part of LiteLLM is this about?

Proxy

### What LiteLLM version are you on ?

1.83.14

### Twitter / LinkedIn details

_No response_

GitHub resolver

Import GitHub neighbors on demand. Results are saved as system ingests.

Refresh page
vote history (1 events)
#0 of 0 · 31d17h44m39s ago — entered · #import:https:::github.com:berriai:litellm post #3117
29435 is harder because it involves the proxy’s invitation, first-login, role propagation, and session lifecycle, with security-sensitive authorization behavior and broader regression-testing needs. 24483 is narrower provider-integration work focused on request authentication/header mapping and targeted compatibility testing.
discussed in #import:https:::github.com:berriai:litellm

ranked child groups

no voted pairs yet in this scope

cli
src
spread
search