diff --git a/CHANGELOG.md b/CHANGELOG.md index dea8e81ed..0c09f3f91 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -16,8 +16,31 @@ NetBox now makes use of its own `Tag` model instead of the vanilla model which s lives in the `extras` app and thus any permissions that you may have configured using "Taggit | Tag" should be changed to now use "Extras | Tag." +### View Permissions + +Django 2.1 introduced the ability to enforce view-only permissions for different object types. NetBox now enforces +these by default. You can grant view permission to a user or group by assigning the "can view" permission for the +desired object(s). + +To exempt certain objects from the enforcement of view permissions, so that any user (including anonymous users) can +view them, add them to the new `EXEMPT_VIEW_PERMISSIONS` setting in `configuration.py`: + +``` +EXEMPT_VIEW_PERMISSIONS = [ + 'dcim.site', + 'ipam.prefix', +] +``` + +To exclude _all_ objects, effectively disabling view permissions, set: + +``` +EXEMPT_VIEW_PERMISSIONS = ['*'] +``` + ## Enhancements +* [#323](https://github.com/digitalocean/netbox/issues/323) - Enforce per-object type view permissions * [#1792](https://github.com/digitalocean/netbox/issues/1792) - Add CustomFieldChoices API endpoint * [#2324](https://github.com/digitalocean/netbox/issues/2324) - Add `color` option for tags * [#2643](https://github.com/digitalocean/netbox/issues/2643) - Add `description` field to console/power components and device bays