NeoAnd/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2025-08-25 08:46:10 -06:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

12589 review changes - change permission check

Browse Source
This commit is contained in:
Arthur 2023-07-14 13:04:40 +07:00
parent 8d84eec3e1
commit f9f3899144
1 changed files with 2 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
netbox/utilities/querysets.py
View File

@ -2,7 +2,7 @@ from django.contrib.contenttypes.models import ContentType
from django.db.models import Prefetch, QuerySet from django.db.models import Prefetch, QuerySet
from users.constants import CONSTRAINT_TOKEN_USER from users.constants import CONSTRAINT_TOKEN_USER
from utilities.permissions import permission_is_exempt, qs_filter_from_constraints from utilities.permissions import permission_is_exempt, qs_filter_from_constraints, get_permission_for_model
__all__ = ( __all__ = (
'RestrictedPrefetch', 'RestrictedPrefetch',
@ -47,10 +47,7 @@ class RestrictedQuerySet(QuerySet):
:param action: The action which must be permitted (e.g. "view" for "dcim.view_site"); default is 'view' :param action: The action which must be permitted (e.g. "view" for "dcim.view_site"); default is 'view'
""" """
# Resolve the full name of the required permission # Resolve the full name of the required permission
ct = ContentType.objects.get_for_model(self.model) permission_required = get_permission_for_model(model, action)
app_label = ct.app_label
model_name = ct.model
permission_required = f'{app_label}.{action}_{model_name}'
# Bypass restriction for superusers and exempt views # Bypass restriction for superusers and exempt views
if user.is_superuser or permission_is_exempt(permission_required): if user.is_superuser or permission_is_exempt(permission_required):