mirror of
https://github.com/ansible/awx.git
synced 2026-01-15 11:50:42 -03:30
Never return database values for read-only fields.
This commit is contained in:
parent
e22b0f75b8
commit
89c629e796
@ -68,7 +68,7 @@ class SettingSingletonDetail(RetrieveUpdateDestroyAPIView):
|
||||
if self.category_slug not in category_slugs:
|
||||
raise PermissionDenied()
|
||||
|
||||
registered_settings = settings_registry.get_registered_settings(category_slug=self.category_slug)
|
||||
registered_settings = settings_registry.get_registered_settings(category_slug=self.category_slug, read_only=False)
|
||||
if self.category_slug == 'user':
|
||||
return Setting.objects.filter(key__in=registered_settings, user=self.request.user)
|
||||
else:
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user