- Backend authorization: enforce server-side org scoping on /user/list. Non-proxy-admin callers must be org_admin; their permitted org IDs are fetched from the DB and intersected with any requested org filter. - Race condition: gate userListQuery on org data being loaded for non-proxy-admin users (undefined = loading, null = no filter needed). - Silent failure: surface organizationMemberAddCall errors via NotificationsManager instead of only console.error. - Multi-org: org admins managing multiple orgs can choose which org to add the new user to via a dropdown (defaults to first org). - Change organization_id param to List[str] (repeated query params) instead of comma-separated string. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| litellm-dashboard | ||