AAP-79229 Custom roles with identical permissions to built-in roles cause HTTP 500/403 resource creation failures (#16639)

andle genuine custom matrices and arbitrary names when no legacy equivalent exists
This commit is contained in:
Liam Allen
2026-09-15 14:57:07 +01:00
committed by GitHub
parent fb4c3ab0c3
commit c0e1e7e6cb
5 changed files with 141 additions and 27 deletions
+4
View File
@@ -2964,6 +2964,8 @@ class ResourceAccessListElementSerializer(UserSerializer):
continue
new_roles_seen.add(new_role.id)
old_role = get_role_from_object_role(new_role)
if old_role is None:
continue
all_permissive_role_ids.add(old_role.id)
if int(new_role.object_id) == obj.id and new_role.content_type_id == content_type.id:
@@ -2984,6 +2986,8 @@ class ResourceAccessListElementSerializer(UserSerializer):
continue
new_roles_seen.add(new_role.id)
old_role = get_role_from_object_role(new_role)
if old_role is None:
continue
all_permissive_role_ids.add(old_role.id)
# In DAB RBAC, superuser is strictly a user flag, and global roles are not in the RoleEvaluation table