External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-03-04 10:11:05 -03:30
Code Issues Packages Projects Releases Wiki Activity

Make sure we clear owned-credentials when we delete a user

Browse Source
This commit is contained in:
Matthew Jones
2014-08-11 10:48:34 -04:00
parent 7d6cf7e2d0
commit 04eeffe2a7
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
awx/api/views.py
View File

@@ -772,6 +772,15 @@ class UserDetail(RetrieveUpdateDestroyAPIView):
if changed: if changed:
raise PermissionDenied('Cannot change %s' % ', '.join(changed.keys())) raise PermissionDenied('Cannot change %s' % ', '.join(changed.keys()))
def destroy(self, request, *args, **kwargs):
obj = User.objects.get(pk=kwargs['pk'])
can_delete = request.user.can_access(User, 'delete', obj)
if not can_delete:
raise PermissionDenied('Cannot delete user')
for own_credential in Credential.objects.filter(user=obj):
own_credential.mark_inactive()
return super(UserDetail, self).destroy(request, *args, **kwargs)
class CredentialList(ListCreateAPIView): class CredentialList(ListCreateAPIView):
model = Credential model = Credential