mirror of
https://github.com/ansible/awx.git
synced 2026-01-13 11:00:03 -03:30
Merge pull request #2444 from AlanCoding/2364_access_list_restriction
Filter access_list to users visible by requesting user
This commit is contained in:
commit
cfc763af07
@ -515,4 +515,4 @@ class ResourceAccessList(ListAPIView):
|
||||
ancestors = set()
|
||||
for r in roles:
|
||||
ancestors.update(set(r.ancestors.all()))
|
||||
return User.objects.filter(roles__in=list(ancestors)).distinct()
|
||||
return self.request.user.get_queryset(User).filter(roles__in=list(ancestors)).distinct()
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user