NeoAnd/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2025-08-13 19:18:16 -06:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

15582 check permissions on specific object when sync request

Browse Source
This commit is contained in:
Arthur 2024-04-11 10:51:04 -07:00
parent b7668fbfc3
commit 1449cda390
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
netbox/core/api/views.py
View File

@ -37,6 +37,11 @@ class DataSourceViewSet(NetBoxModelViewSet):
raise PermissionDenied("Syncing data sources requires the core.sync_datasource permission.")
datasource = get_object_or_404(DataSource, pk=pk)
# have to check perms again against this specific object as there could be constraints
if not request.user.has_perm('core.sync_datasource', datasource):
raise PermissionDenied("User does not have the core.sync_datasource permission for this object.")
datasource.enqueue_sync_job(request)
serializer = serializers.DataSourceSerializer(datasource, context={'request': request})