Merge pull request #3022 from wwitzel3/issue-2979

Fix sysadmin and sysauditor viewing orphan inventory script.
This commit is contained in:
Wayne Witzel III
2016-07-15 15:26:33 -04:00
committed by GitHub
2 changed files with 49 additions and 3 deletions

View File

@@ -1283,7 +1283,9 @@ class CustomInventoryScriptSerializer(BaseSerializer):
if obj is None:
return ret
request = self.context.get('request', None)
if request.user not in obj.admin_role:
if request.user not in obj.admin_role and \
not request.user.is_superuser and \
not request.user.is_system_auditor:
ret['script'] = None
return ret