External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-02-24 22:46:01 -03:30
Code Issues Packages Projects Releases Wiki Activity

restrict queryset for access_list to visable users

Browse Source
This commit is contained in:
AlanCoding
2016-06-15 10:52:25 -04:00
parent 69c994bd16
commit 54fa11cf25
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
awx/api/generics.py
View File

@@ -515,4 +515,4 @@ class ResourceAccessList(ListAPIView):
ancestors = set() ancestors = set()
for r in roles: for r in roles:
ancestors.update(set(r.ancestors.all())) ancestors.update(set(r.ancestors.all()))
return User.objects.filter(roles__in=list(ancestors)).distinct() return self.request.user.get_queryset(User).filter(roles__in=list(ancestors)).distinct()