From b1959184aa13bfa90d486c5b19bd97750feac52c Mon Sep 17 00:00:00 2001 From: rmanyari Date: Tue, 28 Feb 2023 13:12:07 -0700 Subject: [PATCH] Fixes #11812: Leverage object based permissions to render the right action buttons on tables --- netbox/netbox/tables/columns.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/netbox/netbox/tables/columns.py b/netbox/netbox/tables/columns.py index 519f6021e..3162e80a2 100644 --- a/netbox/netbox/tables/columns.py +++ b/netbox/netbox/tables/columns.py @@ -245,7 +245,7 @@ class ActionsColumn(tables.Column): user = getattr(request, 'user', AnonymousUser()) for idx, (action, attrs) in enumerate(self.actions.items()): permission = f'{model._meta.app_label}.{attrs.permission}_{model._meta.model_name}' - if attrs.permission is None or user.has_perm(permission): + if attrs.permission is None or user.has_perm(permission, obj=record): url = reverse(get_viewname(model, action), kwargs={'pk': record.pk}) # Render a separate button if a) only one action exists, or b) if split_actions is True