External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-02-14 17:50:02 -03:30
Code Issues Packages Projects Releases Wiki Activity

Deletes are operational plus access control hooks for deletes.

Browse Source
This commit is contained in:
Michael DeHaan
2013-03-21 11:06:47 -04:00
parent 843164ba04
commit c189cfcddb
4 changed files with 46 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
lib/main/rbac.py
View File

@@ -28,7 +28,13 @@ class CustomRbac(permissions.BasePermission):
if not self._common_user_check(request):
return False
if obj is None:
# filtering happens in the view
if getattr(view, 'list_permissions_check', None):
if request.user.is_superuser:
return True
if not view.list_permissions_check(request):
raise PermissionDenied()
elif not getattr(view, 'item_permissions_check', None):
raise Exception("internal error, list_permissions_check or item_permissions_check must be defined")
return True
else:
# haven't tested around these confines yet
@@ -39,6 +45,6 @@ class CustomRbac(permissions.BasePermission):
return True
if not self._common_user_check(request):
return False
if not view.permissions_check(request, obj):
if not view.item_permissions_check(request, obj):
raise PermissionDenied()
return True