From 19da9955ceb30b1587c4d894cd8081b318375628 Mon Sep 17 00:00:00 2001 From: Jeff Bradberry Date: Wed, 9 Jun 2021 10:13:36 -0400 Subject: [PATCH] Make sure that managed EEs can't be deleted --- awx/main/access.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/awx/main/access.py b/awx/main/access.py index f9a6983b5b..34fe973445 100644 --- a/awx/main/access.py +++ b/awx/main/access.py @@ -1370,6 +1370,8 @@ class ExecutionEnvironmentAccess(BaseAccess): return self.check_related('organization', Organization, data, obj=obj, mandatory=True, role_field='execution_environment_admin_role') def can_delete(self, obj): + if obj.managed_by_tower: + raise PermissionDenied return self.can_change(obj, None)