External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-03-03 09:48:51 -03:30
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2408 from ryanpetrello/fix-2323

Browse Source 
properly check read permissions in `GET /api/v2/wfjt/N/copy/`
This commit is contained in:
Ryan Petrello
2018-07-03 15:32:20 -04:00
committed by GitHub
parent 1feb81f20c d1f5485b96
commit 151187f623
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
awx/api/views.py
View File

@@ -3720,7 +3720,11 @@ class WorkflowJobTemplateCopy(WorkflowsEnforcementMixin, CopyAPIView):
copy_return_serializer_class = WorkflowJobTemplateSerializer copy_return_serializer_class = WorkflowJobTemplateSerializer
def get(self, request, *args, **kwargs): def get(self, request, *args, **kwargs):
if get_request_version(request) < 2:
return self.v1_not_allowed()
obj = self.get_object() obj = self.get_object()
if not request.user.can_access(obj.__class__, 'read', obj):
raise PermissionDenied()
can_copy, messages = request.user.can_access_with_errors(self.model, 'copy', obj) can_copy, messages = request.user.can_access_with_errors(self.model, 'copy', obj)
data = OrderedDict([ data = OrderedDict([
('can_copy', can_copy), ('can_copy_without_user_input', can_copy), ('can_copy', can_copy), ('can_copy_without_user_input', can_copy),