External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-02-01 09:38:10 -03:30
Code Issues Packages Projects Releases Wiki Activity

Tests for permission checking on who can start jobs of certain types, etc.

Browse Source
This commit is contained in:
Michael DeHaan
2013-04-18 22:32:54 -04:00
parent 28332cc5a5
commit 2f5745272f
2 changed files with 72 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/main/models/__init__.py
View File

@@ -780,6 +780,7 @@ class JobTemplate(CommonModel):
if user.is_superuser:
return True
project = Project.objects.get(pk=data['project'])
inventory = Inventory.objects.get(pk=data['inventory'])
admin_of_orgs = project.organizations.filter(admins__in = [ user ])
if admin_of_orgs.count() > 0:
@@ -792,7 +793,7 @@ class JobTemplate(CommonModel):
if job_type == PERM_INVENTORY_CHECK:
# if you have run permissions, you can also create check jobs
has_project_permission = True
elif job_type == PERM_INVENTORY_DEPLOY and perm.job_type == PERM_INVENTORY_DEPLOY:
elif job_type == PERM_INVENTORY_DEPLOY and perm.permission_type == PERM_INVENTORY_DEPLOY:
# you need explicit run permissions to make run jobs
has_project_permission = True
team_permissions = Permission.objects.filter(inventory=inventory, project=project, team__users__in = [user])
@@ -800,7 +801,7 @@ class JobTemplate(CommonModel):
if job_type == PERM_INVENTORY_CHECK:
# if you have run permissions, you can also create check jobs
has_project_permission = True
elif job_type == PERM_INVENTORY_DEPLOY and perm.job_type == PERM_INVENTORY_DEPLOY:
elif job_type == PERM_INVENTORY_DEPLOY and perm.permission_type == PERM_INVENTORY_DEPLOY:
# you need explicit run permissions to make run jobs
has_project_permission = True