6 views
-/https://github.com/berriai/litellm/issues/30442
GitHub Β· issue

#30442 [Bug]: Dashboard calls admin-only routes for non-admin users, flooding logs with ERROR stacktraces

  • State: open
  • Author: @sh3d2
  • Labels: proxy

## Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

## What happened?

Every non-admin user logged into the LiteLLM dashboard generates a continuous stream of ERROR-level log entries with full stacktraces β€” several per page load/refresh. The dashboard unconditionally calls admin-only endpoints on every page render, regardless of the logged-in user's role.

**Affected routes (called by the UI for all users):** - `GET /get/mcp_semantic_filter_settings` - `GET /tag/list` - `GET /user/daily/activity/aggregated` - `GET /policies/list` - `GET /config/list` - `GET /credentials` - `GET /get/config/callbacks` - `GET /prompts/list` - `GET /in_product_nudges`

Each of these correctly returns 403 for `internal_user` role β€” authorization works. The problem is that `auth_exception_handler.py` logs every 403 via `verbose_proxy_logger.exception()` at ERROR level with a full stacktrace, indistinguishable from real application errors.

## Steps to Reproduce

1. Create a user with `internal_user` role 2. Log into the LiteLLM dashboard with that user 3. Navigate to any dashboard page 4. Observe logs: each page load generates ~10–15 ERR…

GitHub resolver

Import GitHub neighbors on demand. Results are saved as system ingests.

Refresh page
vote history (2 events)
#0 of 0 Β· 31d18h58m11s ago β€” entered Β· #import:https:::github.com:berriai:litellm post #1885
Issue 30208 requires broader cross-provider streaming behavior, configuration/API design, compatibility handling, and extensive testing, making it substantially riskier than the targeted dashboard authorization/logging adjustment in issue 30442.
#0 of 0 Β· 31d18h54m48s ago β€” current Β· #import:https:::github.com:berriai:litellm post #1944
30442 is harder because it spans numerous dashboard data flows, role-aware request handling, and authorization/logging behavior, while 34096 is a more localized model-discovery UI defect.
discussed in #import:https:::github.com:berriai:litellm

ranked child groups

no voted pairs yet in this scope

cli
src
spread
search