External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-09-04 19:08:30 -02:30
Code Issues Packages Projects Releases Wiki Activity

Prevent search on the NotificationTemplate.notification_configuration field

Browse Source
This commit is contained in:
Jeff Bradberry
2019-09-26 14:37:04 -04:00
parent 640e5391f3
commit 1a7148dc80
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
awx/main/tests/functional/api/test_notifications.py
View File

@@ -127,3 +127,11 @@ def test_post_wfjt_running_notification(get, post, admin, notification_template,
response = get(url, admin)
assert response.status_code == 200
assert len(response.data['results']) == 1
@pytest.mark.django_db
def test_search_on_notification_configuration_is_prevented(get, admin):
url = reverse('api:notification_template_list')
response = get(url, {'notification_configuration__regex': 'ABCDEF'}, admin)
assert response.status_code == 403
assert response.data == {"detail": "Filtering on notification_configuration is not allowed."}