update permission logic, update job runtime tests

This commit is contained in:
AlanCoding
2016-04-13 06:34:25 -04:00
parent 6fc51e2d85
commit 914918b5ae
2 changed files with 87 additions and 40 deletions

View File

@@ -2119,12 +2119,12 @@ class JobTemplateLaunch(RetrieveAPIView, GenericAPIView):
if 'credential' in prompted_fields and prompted_fields['credential'] != getattrd(obj, 'credential.pk', None):
new_credential = Credential.objects.get(pk=prompted_fields['credential'])
if not request.user.can_access(Credential, 'read', new_credential):
if not request.user.can_access(Credential, 'use', new_credential):
raise PermissionDenied()
if 'inventory' in prompted_fields and prompted_fields['inventory'] != getattrd(obj, 'inventory.pk', None):
new_inventory = Inventory.objects.get(pk=prompted_fields['inventory'])
if not request.user.can_access(Inventory, 'read', new_inventory):
if not request.user.can_access(Inventory, 'use', new_inventory):
raise PermissionDenied()
kv = prompted_fields