{"record":{"id":"739db83a5a01499c","repo":"BerriAI/litellm","slug":"access-denied-you-do-not-have-permission-to-acces-739db8","errorCode":null,"errorMessage":"Access denied: You do not have permission to access this vector store","messagePattern":"Access denied: You do not have permission to access this vector store","errorType":"http","errorClass":"HTTPException","httpStatus":403,"severity":"error","filePath":"litellm/proxy/vector_store_endpoints/utils.py","lineNumber":258,"sourceCode":"        verbose_proxy_logger.warning(\n            \"Failed to resolve vector store id=%s from shared cache: %s\",\n            vector_store_id,\n            e,\n        )\n        raise HTTPException(\n            status_code=500,\n            detail=\"Unable to validate vector store access\",\n        ) from e\n\n\nasync def assert_user_can_access_vector_store(\n    vector_store: LiteLLM_ManagedVectorStore,\n    user_api_key_dict: UserAPIKeyAuth,\n    detail: str = \"Access denied: You do not have permission to access this vector store\",\n) -> None:\n    \"\"\"Raise 403 unless the caller can access the resolved vector store.\"\"\"\n    if not await can_user_access_vector_store(vector_store, user_api_key_dict):\n        raise HTTPException(status_code=403, detail=detail)\n\n\nasync def assert_user_can_access_vector_store_id(\n    vector_store_id: str,\n    user_api_key_dict: UserAPIKeyAuth,\n    detail: str = \"Access denied: You do not have permission to access this vector store\",\n) -> LiteLLM_ManagedVectorStore | None:\n    \"\"\"\n    Resolve a managed vector store id and enforce ownership if it exists.\n\n    Unknown ids are treated as provider-native ids and are not rejected here.\n    \"\"\"\n    vector_store: Final = await get_litellm_managed_vector_store(vector_store_id=vector_store_id)\n    if vector_store is not None:\n        await assert_user_can_access_vector_store(\n            vector_store=vector_store,\n            user_api_key_dict=user_api_key_dict,\n            detail=detail,","sourceCodeStart":240,"sourceCodeEnd":276,"githubUrl":"https://github.com/BerriAI/litellm/blob/77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8/litellm/proxy/vector_store_endpoints/utils.py#L240-L276","documentation":"Sentinel 403 from assert_user_can_access_vector_store: the resolved vector store's team/user restrictions do not include the caller. Access to multi-tenant managed stores is keyed to the caller's team_id/user_id; an admin must add them to the store's allowed list.","triggerScenarios":"Thrown at litellm/proxy/vector_store_endpoints/utils.py:258 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Use a key/team granted access to this vector store, or ask an admin to grant permission."],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8","analyzedAt":"2026-08-18T11:44:31.656Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}