From 693a5820ae6632250fd365c0c6c4e3e5ec5d7c01 Mon Sep 17 00:00:00 2001 From: Peter Braun Date: Fri, 14 Aug 2026 13:20:01 +0200 Subject: [PATCH] fix: do not delete any of the jwt managed roles during cleanup (#16590) fix: do not delete and of the jwt managed roles during cleanup --- awx/main/migrations/_dab_rbac.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/awx/main/migrations/_dab_rbac.py b/awx/main/migrations/_dab_rbac.py index 0fff111bf2..f52f395434 100644 --- a/awx/main/migrations/_dab_rbac.py +++ b/awx/main/migrations/_dab_rbac.py @@ -429,7 +429,11 @@ def setup_managed_role_definitions(apps, schema_editor): ) ) - unexpected_role_definitions = RoleDefinition.objects.filter(managed=True).exclude(pk__in=[rd.pk for rd in managed_role_definitions]) + unexpected_role_definitions = ( + RoleDefinition.objects.filter(managed=True) + .exclude(pk__in=[rd.pk for rd in managed_role_definitions]) + .exclude(name__in=settings.ANSIBLE_BASE_JWT_MANAGED_ROLES) + ) for role_definition in unexpected_role_definitions: logger.info(f'Deleting old managed role definition {role_definition.name}, pk={role_definition.pk}') role_definition.delete()