External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-04-05 01:59:25 -02:30
Code Issues Packages Projects Releases Wiki Activity

Added remaining sec tests for adding subobjects to collection.

Browse Source
This commit is contained in:
Michael DeHaan
2013-03-23 15:08:02 -04:00
parent a1c614500c
commit 284c495c11
4 changed files with 21 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/main/rbac.py
View File

@@ -13,7 +13,6 @@ class CustomRbac(permissions.BasePermission):
# no anonymous users
if request.user.is_anonymous():
# 401, not 403, hence no raised exception
print "PD4"
return False
# superusers are always good
if request.user.is_superuser:
@@ -31,7 +30,6 @@ class CustomRbac(permissions.BasePermission):
if request.user.is_superuser:
return True
if not view.list_permissions_check(request):
print "DEBUG: PD1"
raise PermissionDenied()
elif not getattr(view, 'item_permissions_check', None):
raise Exception("internal error, list_permissions_check or item_permissions_check must be defined")
@@ -44,11 +42,9 @@ class CustomRbac(permissions.BasePermission):
if request.user.is_superuser:
return True
if not self._common_user_check(request):
print "DEBUG: PD2"
return False
if not obj.active:
raise Http404()
if not view.item_permissions_check(request, obj):
print "DEBUG: PD3"
raise PermissionDenied()
return True