Make job queryset only require JT read access to see

As opposed to credential access, since users can see and potentially run
JT's without credential access now.
This commit is contained in:
Akita Noek
2016-05-12 11:33:10 -04:00
parent fb97438573
commit 6c0c789612

View File

@@ -838,9 +838,7 @@ class JobAccess(BaseAccess):
if self.user.is_superuser:
return qs.all()
credential_ids = self.user.get_queryset(Credential)
return qs.filter(
credential_id__in=credential_ids,
job_template__in=JobTemplate.accessible_objects(self.user, 'read_role')
)