External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-01-13 19:10:07 -03:30
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1378 from rooftopcellist/no_patch_app

Browse Source 
disallow changing token-app
This commit is contained in:
Christian Adams 2018-03-09 10:33:24 -05:00 committed by GitHub
commit cee12c4e6c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
awx/api/serializers.py
View File

@ -939,7 +939,6 @@ class UserAuthorizedTokenSerializer(BaseSerializer):
'expires', 'scope', 'application',
)
read_only_fields = ('user', 'token', 'expires')
read_only_on_update_fields = ('application',)
def get_token(self, obj):
request = self.context.get('request', None)
@ -1105,6 +1104,12 @@ class OAuth2TokenSerializer(BaseSerializer):
)
return obj
class OAuth2TokenDetailSerializer(OAuth2TokenSerializer):
class Meta:
read_only_fields = ('*', 'user', 'application')
class OAuth2AuthorizedTokenSerializer(BaseSerializer):
@ -1118,7 +1123,6 @@ class OAuth2AuthorizedTokenSerializer(BaseSerializer):
'expires', 'scope', 'application',
)
read_only_fields = ('user', 'token', 'expires')
read_only_on_update_fields = ('application',)
def get_token(self, obj):
request = self.context.get('request', None)
@ -1171,8 +1175,7 @@ class OAuth2PersonalTokenSerializer(BaseSerializer):
'*', '-name', 'description', 'user', 'token', 'refresh_token',
'application', 'expires', 'scope',
)
read_only_fields = ('user', 'token', 'expires')
read_only_on_update_fields = ('application',)
read_only_fields = ('user', 'token', 'expires', 'application')
def get_modified(self, obj):
if obj is None:

2
awx/api/views.py
View File

@ -1587,7 +1587,7 @@ class OAuth2TokenDetail(RetrieveUpdateDestroyAPIView):
view_name = _("OAuth Token Detail")
model = OAuth2AccessToken
serializer_class = OAuth2TokenSerializer
serializer_class = OAuth2TokenDetailSerializer
class OAuth2TokenActivityStreamList(ActivityStreamEnforcementMixin, SubListAPIView):