External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-01-19 05:31:22 -03:30
Code Issues Packages Projects Releases Wiki Activity

Do not allow superuser promotion by non-superusers.

Browse Source
This commit is contained in:
Luke Sneeringer 2014-11-11 11:55:03 -06:00
parent ba1b9b9136
commit 29eaa495bc
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
awx/api/views.py
View File

@ -773,6 +773,7 @@ class UserList(ListCreateAPIView):
model = User
serializer_class = UserSerializer
@disallow_superuser_escalation
class UserMeList(ListAPIView):
model = User
@ -847,7 +848,7 @@ class UserActivityStreamList(SubListAPIView):
return qs.filter(Q(actor=parent) | Q(user__in=[parent]))
@disallow_superuser_escalation
class UserDetail(RetrieveUpdateDestroyAPIView):
model = User