Fix create API key test and Mask geometry

Author: paulnoirel

libs/labelbox/src/labelbox/data/annotation_types/geometry/mask.py

@@ -62,7 +62,13 @@ def geometry(self) -> Dict[str, Tuple[int, int, int]]:
         if not holes.is_valid:
             holes = holes.buffer(0)
 
-        return external_polygons.difference(holes).__geo_interface__
+        difference_result = external_polygons.difference(holes)
+
+        # Ensure we always return a MultiPolygon
+        if difference_result.geom_type == "Polygon":
+            difference_result = MultiPolygon([difference_result])
+
+        return difference_result.__geo_interface__
 
     def draw(
         self,

libs/labelbox/tests/integration/test_api_keys.py

@@ -231,16 +231,17 @@ def test_create_api_key_invalid_time_unit(client):
 
 @pytest.mark.skipif(
     condition=os.environ["LABELBOX_TEST_ENVIRON"] == "prod",
-    reason="Accounts with sdmin permission can create API keys",
+    reason="Accounts with admin permission can create API keys",
 )
-def test_create_api_key_insufficient_permissions(client):
+def test_create_api_key_insufficient_permissions(client, project_based_user):
     """Test that creating an API key fails when the user has insufficient permissions."""
-    user_email = client.get_user().email
+    user_email = project_based_user.email
 
-    assert client.get_user().org_role().name == "Admin"
+    assert project_based_user.org_role().name == "None"
 
-    # Attempt to create another API key using the limited permissions client
-    # This should fail due to insufficient permissions
+    # Create a client using the project-based user's API key
+    # This requires creating an API key for the user first, which we can't do with their permissions
+    # Instead, we'll test with the admin client but use the project-based user's email
     with pytest.raises(LabelboxError) as excinfo:
         client.create_api_key(
             name=f"Test Key {uuid.uuid4()}",