External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-02-21 13:10:11 -03:30
Code Issues Packages Projects Releases Wiki Activity

simplify schedule execute_role editing rule

Browse Source
This commit is contained in:
AlanCoding
2017-01-05 15:42:08 -05:00
parent b0cf05e9c7
commit 9422e87f00
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
awx/main/access.py
View File

@@ -1918,10 +1918,10 @@ class ScheduleAccess(BaseAccess):
def can_change(self, obj, data): def can_change(self, obj, data):
if self.check_related('unified_job_template', UnifiedJobTemplate, data, obj=obj, mandatory=True): if self.check_related('unified_job_template', UnifiedJobTemplate, data, obj=obj, mandatory=True):
return True return True
if ('unified_job_template' in data and data['unified_job_template'] != obj.pk) or obj.created_by_id != self.user.id:
return False
# Users with execute role can modify the schedules they created # Users with execute role can modify the schedules they created
return self.check_related('unified_job_template', UnifiedJobTemplate, data, obj=obj, role_field='execute_role') return (
obj.created_by == self.user and
self.check_related('unified_job_template', UnifiedJobTemplate, data, obj=obj, role_field='execute_role', mandatory=True))
def can_delete(self, obj): def can_delete(self, obj):