From 6c0c7896127a58962777fc27e3eda1e81d668238 Mon Sep 17 00:00:00 2001 From: Akita Noek Date: Thu, 12 May 2016 11:33:10 -0400 Subject: [PATCH] Make job queryset only require JT read access to see As opposed to credential access, since users can see and potentially run JT's without credential access now. --- awx/main/access.py | 2 -- 1 file changed, 2 deletions(-) diff --git a/awx/main/access.py b/awx/main/access.py index d9055e925b..e952ba730e 100644 --- a/awx/main/access.py +++ b/awx/main/access.py @@ -838,9 +838,7 @@ class JobAccess(BaseAccess): if self.user.is_superuser: return qs.all() - credential_ids = self.user.get_queryset(Credential) return qs.filter( - credential_id__in=credential_ids, job_template__in=JobTemplate.accessible_objects(self.user, 'read_role') )