External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-03-20 18:37:39 -02:30
Code Issues Packages Projects Releases Wiki Activity

Simplify can_access for instance groups on job templates

Browse Source
This commit is contained in:
Matthew Jones
2017-05-11 22:17:42 -04:00
parent f8fc9cff5c
commit c1a6fc050d
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
awx/main/access.py
View File

@@ -1312,9 +1312,7 @@ class JobTemplateAccess(BaseAccess):
if isinstance(sub_obj, NotificationTemplate): if isinstance(sub_obj, NotificationTemplate):
return self.check_related('organization', Organization, {}, obj=sub_obj, mandatory=True) return self.check_related('organization', Organization, {}, obj=sub_obj, mandatory=True)
if relationship == "instance_groups": if relationship == "instance_groups":
if self.user.can_access(type(sub_obj), "read", sub_obj) and self.user in obj.project.organization.admin_role: return self.user.can_access(type(sub_obj), "read", sub_obj) and self.user in obj.project.organization.admin_role
return True
return False
return super(JobTemplateAccess, self).can_attach( return super(JobTemplateAccess, self).can_attach(
obj, sub_obj, relationship, data, skip_sub_obj_read_check=skip_sub_obj_read_check) obj, sub_obj, relationship, data, skip_sub_obj_read_check=skip_sub_obj_read_check)