From aac930237a90b9342db2f902e65a947fbefff0d6 Mon Sep 17 00:00:00 2001 From: Jeremy Stretch Date: Tue, 10 Nov 2020 11:16:35 -0500 Subject: [PATCH] Fix permissions for REST API status view --- netbox/netbox/api/views.py | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/netbox/netbox/api/views.py b/netbox/netbox/api/views.py index 86910089a..309cbb4aa 100644 --- a/netbox/netbox/api/views.py +++ b/netbox/netbox/api/views.py @@ -15,6 +15,7 @@ from rest_framework.viewsets import GenericViewSet from rq.worker import Worker from netbox.api import BulkOperationSerializer +from netbox.api.authentication import IsAuthenticatedOrLoginNotRequired from netbox.api.exceptions import SerializerNotFound from utilities.api import get_serializer_for_model @@ -233,12 +234,12 @@ class ModelViewSet(mixins.CreateModelMixin, class StatusView(APIView): """ - Provide a lightweight read-only endpoint for conveying NetBox's current operational status. + A lightweight read-only endpoint for conveying NetBox's current operational status. """ - permission_classes = [] + permission_classes = [IsAuthenticatedOrLoginNotRequired] def get(self, request): - # Gather the version number from all installed Django apps + # Gather the version numbers from all installed Django apps installed_apps = {} for app_config in apps.get_app_configs(): app = app_config.module