fix(user_dashboard.tsx): ensure non admin can't view other keys

BerriAI · Feb 7, 2025 · 5efc6f7 · 5efc6f7
1 parent 296b645
commit 5efc6f7
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/ui/litellm-dashboard/src/components/create_key_button.tsx b/ui/litellm-dashboard/src/components/create_key_button.tsx
@@ -159,7 +159,7 @@ const CreateKey: React.FC<CreateKeyProps> = ({
 
       message.info("Making API Call");
       setIsModalVisible(true);
-
+      
       if(keyOwner === "you"){
         formValues.user_id = userID 
       }

diff --git a/ui/litellm-dashboard/src/components/user_dashboard.tsx b/ui/litellm-dashboard/src/components/user_dashboard.tsx
@@ -213,9 +213,12 @@ const UserDashboard: React.FC<UserDashboardProps> = ({
             } else {
               setKeys(
                 response["keys"].concat(
-                  response.teams.flatMap((team: any) => team.keys)
+                  response.teams
+                    .filter((team: any) => userRole === "Admin" || team.user_id === userID)
+                    .flatMap((team: any) => team.keys)
                 )
               );
+
             }
 
             const teamsArray = [...response["teams"]];