External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-03-10 22:19:28 -02:30
Code Issues Packages Projects Releases Wiki Activity

prevent input source changes without use role on source cred

Browse Source 
To update an input source, the user must have admin access
to the target credential and at least use role on the source
credential.
This commit is contained in:
Jake McDermott
2019-03-27 14:18:26 -04:00
parent 8c107a5fa8
commit 7ca92e4c1e
2 changed files with 55 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
awx/main/access.py
View File

@@ -1202,7 +1202,10 @@ class CredentialInputSourceAccess(BaseAccess):
if self.can_add(data) is False:
return False
return self.user in obj.target_credential.admin_role
return (
self.user in obj.target_credential.admin_role and
self.user in obj.source_credential.use_role
)
@check_superuser
def can_delete(self, obj):