NeoAnd/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2025-07-24 17:38:37 -06:00
Code Issues Actions 11 Packages Projects Releases Wiki Activity

Enforce authentication for all secrets API views

Browse Source
This commit is contained in:
Jeremy Stretch 2016-07-18 15:28:36 -04:00
parent 0d46a65a36
commit 82ad479037
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
netbox/secrets/api/views.py
View File

@ -28,6 +28,7 @@ class SecretRoleListView(generics.ListAPIView):
""" """
queryset = SecretRole.objects.all() queryset = SecretRole.objects.all()
serializer_class = serializers.SecretRoleSerializer serializer_class = serializers.SecretRoleSerializer
permission_classes = [IsAuthenticated]
class SecretRoleDetailView(generics.RetrieveAPIView): class SecretRoleDetailView(generics.RetrieveAPIView):
@ -36,6 +37,7 @@ class SecretRoleDetailView(generics.RetrieveAPIView):
""" """
queryset = SecretRole.objects.all() queryset = SecretRole.objects.all()
serializer_class = serializers.SecretRoleSerializer serializer_class = serializers.SecretRoleSerializer
permission_classes = [IsAuthenticated]
class SecretListView(generics.GenericAPIView): class SecretListView(generics.GenericAPIView):
@ -47,6 +49,7 @@ class SecretListView(generics.GenericAPIView):
serializer_class = serializers.SecretSerializer serializer_class = serializers.SecretSerializer
filter_class = SecretFilter filter_class = SecretFilter
renderer_classes = [FormlessBrowsableAPIRenderer, JSONRenderer, FreeRADIUSClientsRenderer] renderer_classes = [FormlessBrowsableAPIRenderer, JSONRenderer, FreeRADIUSClientsRenderer]
permission_classes = [IsAuthenticated]
def get(self, request, private_key=None): def get(self, request, private_key=None):
queryset = self.filter_queryset(self.get_queryset()) queryset = self.filter_queryset(self.get_queryset())
@ -91,6 +94,7 @@ class SecretDetailView(generics.GenericAPIView):
.prefetch_related('role__users', 'role__groups') .prefetch_related('role__users', 'role__groups')
serializer_class = serializers.SecretSerializer serializer_class = serializers.SecretSerializer
renderer_classes = [FormlessBrowsableAPIRenderer, JSONRenderer, FreeRADIUSClientsRenderer] renderer_classes = [FormlessBrowsableAPIRenderer, JSONRenderer, FreeRADIUSClientsRenderer]
permission_classes = [IsAuthenticated]
def get(self, request, pk, private_key=None): def get(self, request, pk, private_key=None):
secret = get_object_or_404(Secret, pk=pk) secret = get_object_or_404(Secret, pk=pk)