mirror of
https://github.com/ansible/awx.git
synced 2026-01-13 19:10:07 -03:30
Fixing Credential access issue
This commit is contained in:
parent
bdafd78c07
commit
3cf4d1feb8
@ -586,19 +586,21 @@ class CredentialAccess(BaseAccess):
|
||||
if organization_pk:
|
||||
organization_obj = get_object_or_400(Organization, pk=organization_pk)
|
||||
return check_user_access(self.user, Organization, 'change', organization_obj, None)
|
||||
|
||||
return False
|
||||
|
||||
|
||||
@check_superuser
|
||||
def can_use(self, obj):
|
||||
return self.user in obj.use_role
|
||||
|
||||
@check_superuser
|
||||
def can_change(self, obj, data):
|
||||
if self.user in obj.owner_role:
|
||||
return True
|
||||
return self.can_add(data)
|
||||
if data is not None:
|
||||
keys = data.keys()
|
||||
if 'user' in keys or 'team' in keys or 'organization' in keys:
|
||||
if not self.can_add(data):
|
||||
return False
|
||||
|
||||
return self.user in obj.owner_role
|
||||
|
||||
def can_delete(self, obj):
|
||||
# Unassociated credentials may be marked deleted by anyone, though we
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user