{"record":{"id":"d710a895cbee9b8f","repo":"BerriAI/litellm","slug":"admin-access-required","errorCode":null,"errorMessage":"Admin access required","messagePattern":"Admin access required","errorType":"http","errorClass":"HTTPException","httpStatus":403,"severity":"error","filePath":"litellm/proxy/guardrails/guardrail_endpoints.py","lineNumber":1004,"sourceCode":"    except Exception as e:\n        verbose_proxy_logger.exception(\"Error getting guardrail submission: %s\", e)\n        raise HTTPException(status_code=500, detail=str(e))\n\n\n@router.post(\n    \"/guardrails/submissions/{guardrail_id}/approve\",\n    tags=[\"Guardrails\"],\n)\nasync def approve_guardrail_submission(\n    guardrail_id: str,\n    user_api_key_dict: UserAPIKeyAuth = Depends(user_api_key_auth),\n):\n    \"\"\"Approve a pending guardrail submission: set status to active and initialize in memory (admin only).\"\"\"\n    from litellm.proxy.guardrails.guardrail_registry import IN_MEMORY_GUARDRAIL_HANDLER\n    from litellm.proxy.proxy_server import prisma_client\n\n    if user_api_key_dict.user_role != LitellmUserRoles.PROXY_ADMIN:\n        raise HTTPException(status_code=403, detail=\"Admin access required\")\n\n    if prisma_client is None:\n        raise HTTPException(status_code=500, detail=\"Prisma client not initialized\")\n\n    try:\n        row: Final = await _guardrails_table(prisma_client).find_unique(where={\"guardrail_id\": guardrail_id})\n        if row is None:\n            raise HTTPException(status_code=404, detail=\"Guardrail submission not found\")\n        if row.status != \"pending_review\":\n            raise HTTPException(\n                status_code=400,\n                detail=f\"Guardrail is not pending review (status={row.status})\",\n            )\n\n        now: Final = datetime.now(timezone.utc)\n        await _guardrails_table(prisma_client).update(\n            where={\"guardrail_id\": guardrail_id},\n            data={\"status\": \"active\", \"reviewed_at\": now, \"updated_at\": now},","sourceCodeStart":986,"sourceCodeEnd":1022,"githubUrl":"https://github.com/BerriAI/litellm/blob/77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8/litellm/proxy/guardrails/guardrail_endpoints.py#L986-L1022","documentation":"Raised by the approve/reject guardrail-submission endpoints when the caller lacks admin privileges — submission review is an admin-only workflow (a non-admin reviewer approving their own team's guardrail would defeat the review gate). It is a role check on user_api_key_dict, fired before the submission row is even fetched.","triggerScenarios":"Thrown at litellm/proxy/guardrails/guardrail_endpoints.py:1004 when the library encounters an invalid state.","commonSituations":"A non-admin attempted an admin-only guardrail operation.","solutions":["Use a proxy admin key for this operation."],"exampleFix":"Retry with Authorization: Bearer $LITELLM_MASTER_KEY or an admin key.","handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8","analyzedAt":"2026-08-18T11:44:31.656Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}