External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-05-07 01:17:37 -02:30
Code Issues Packages Projects Releases Wiki Activity

Allow sysadmins to be able to change the pull field for managed EEs

Browse Source
This commit is contained in:
Jeff Bradberry
2021-06-09 10:02:26 -04:00
parent 9aa56b1247
commit 9f1e8a1ae2
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
awx/api/views/__init__.py
View File

@@ -695,6 +695,7 @@ class TeamAccessList(ResourceAccessList):
class ExecutionEnvironmentList(ListCreateAPIView): class ExecutionEnvironmentList(ListCreateAPIView):
always_allow_superuser = False
model = models.ExecutionEnvironment model = models.ExecutionEnvironment
serializer_class = serializers.ExecutionEnvironmentSerializer serializer_class = serializers.ExecutionEnvironmentSerializer
swagger_topic = "Execution Environments" swagger_topic = "Execution Environments"
@@ -702,10 +703,22 @@ class ExecutionEnvironmentList(ListCreateAPIView):
class ExecutionEnvironmentDetail(RetrieveUpdateDestroyAPIView): class ExecutionEnvironmentDetail(RetrieveUpdateDestroyAPIView):
always_allow_superuser = False
model = models.ExecutionEnvironment model = models.ExecutionEnvironment
serializer_class = serializers.ExecutionEnvironmentSerializer serializer_class = serializers.ExecutionEnvironmentSerializer
swagger_topic = "Execution Environments" swagger_topic = "Execution Environments"
def update(self, request, *args, **kwargs):
instance = self.get_object()
fields_to_check = ['name', 'description', 'organization', 'image', 'credential']
if instance.managed_by_tower and request.user.can_access(models.ExecutionEnvironment, 'change', instance):
for field in fields_to_check:
left = getattr(instance, field, None)
right = request.data.get(field, None)
if left != right:
raise PermissionDenied(_("Only the 'pull' field can be edited for managed execution environments."))
return super().update(request, *args, **kwargs)
class ExecutionEnvironmentJobTemplateList(SubListAPIView): class ExecutionEnvironmentJobTemplateList(SubListAPIView):