mirror of
https://github.com/tiennm99/litellm.git
synced 2026-07-10 07:03:21 +00:00
f17d779666
A team member could set any access_group_ids on their key (e.g. a group assigned only to a different team) and override the team's model restriction. Intersect the key's access_group_ids with team_object.access_group_ids in _key_access_group_grants_model so foreign groups are dropped before model expansion. Adds a regression test that asserts expansion is never called for foreign groups.