fix: remove self-orgid balance bypass in checkCustomerBalance()
Removed the 'if llm.ownerid == userorgid: return True' shortcut from checkCustomerBalance() in llmage/accounting.py. All requests now go through the full balance check regardless of whether the model belongs to the caller's organization.
This commit is contained in:
parent
f151ad2c30
commit
265702b894
@ -42,9 +42,6 @@ async def checkCustomerBalance(llmid, userid, userorgid, catelogid=None):
|
|||||||
return False
|
return False
|
||||||
env = ServerEnv()
|
env = ServerEnv()
|
||||||
llm = await get_llm(llmid)
|
llm = await get_llm(llmid)
|
||||||
if llm.ownerid == userorgid:
|
|
||||||
debug(f'self orgid user')
|
|
||||||
return True
|
|
||||||
balance = 0.00
|
balance = 0.00
|
||||||
tpac = await get_user_tpac(userid)
|
tpac = await get_user_tpac(userid)
|
||||||
if tpac:
|
if tpac:
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user