mirror of
https://github.com/ansible/awx.git
synced 2026-05-08 01:47:35 -02:30
Never return database values for read-only fields.
This commit is contained in:
@@ -68,7 +68,7 @@ class SettingSingletonDetail(RetrieveUpdateDestroyAPIView):
|
|||||||
if self.category_slug not in category_slugs:
|
if self.category_slug not in category_slugs:
|
||||||
raise PermissionDenied()
|
raise PermissionDenied()
|
||||||
|
|
||||||
registered_settings = settings_registry.get_registered_settings(category_slug=self.category_slug)
|
registered_settings = settings_registry.get_registered_settings(category_slug=self.category_slug, read_only=False)
|
||||||
if self.category_slug == 'user':
|
if self.category_slug == 'user':
|
||||||
return Setting.objects.filter(key__in=registered_settings, user=self.request.user)
|
return Setting.objects.filter(key__in=registered_settings, user=self.request.user)
|
||||||
else:
|
else:
|
||||||
|
|||||||
Reference in New Issue
Block a user