mirror of
https://github.com/ansible/awx.git
synced 2026-02-28 08:18:43 -03:30
ensure the singleton roles show up for sys auditor / sys admins
This commit is contained in:
@@ -1192,6 +1192,13 @@ class UserRolesList(SubListCreateAttachDetachAPIView):
|
|||||||
if not self.request.user.can_access(User, 'read', u):
|
if not self.request.user.can_access(User, 'read', u):
|
||||||
raise PermissionDenied()
|
raise PermissionDenied()
|
||||||
content_type = ContentType.objects.get_for_model(User)
|
content_type = ContentType.objects.get_for_model(User)
|
||||||
|
|
||||||
|
sys_admin = Role.singleton(ROLE_SINGLETON_SYSTEM_ADMINISTRATOR)
|
||||||
|
sys_audit = Role.singleton(ROLE_SINGLETON_SYSTEM_AUDITOR)
|
||||||
|
|
||||||
|
if self.request.user in sys_admin or self.request.user in sys_audit:
|
||||||
|
return u.roles.all().exclude(content_type=content_type, object_id=u.id)
|
||||||
|
|
||||||
return Role.filter_visible_roles(self.request.user, u.roles.all()) \
|
return Role.filter_visible_roles(self.request.user, u.roles.all()) \
|
||||||
.exclude(content_type=content_type, object_id=u.id)
|
.exclude(content_type=content_type, object_id=u.id)
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user