fix(settings): Add correct permissions for device model view/update
!13
This commit is contained in:
@ -1,5 +1,6 @@
|
|||||||
from django.contrib.auth.mixins import PermissionRequiredMixin
|
from django.contrib.auth import decorators as auth_decorator
|
||||||
from django.urls import reverse
|
from django.urls import reverse
|
||||||
|
from django.utils.decorators import method_decorator
|
||||||
from django.views import generic
|
from django.views import generic
|
||||||
|
|
||||||
from access.mixin import OrganizationPermission
|
from access.mixin import OrganizationPermission
|
||||||
@ -13,7 +14,8 @@ from settings.models.user_settings import UserSettings
|
|||||||
class View(OrganizationPermission, generic.UpdateView):
|
class View(OrganizationPermission, generic.UpdateView):
|
||||||
model = DeviceModel
|
model = DeviceModel
|
||||||
permission_required = [
|
permission_required = [
|
||||||
'itam.view_device_type'
|
'itam.view_devicemodel',
|
||||||
|
'itam.change_devicemodel',
|
||||||
]
|
]
|
||||||
template_name = 'form.html.j2'
|
template_name = 'form.html.j2'
|
||||||
|
|
||||||
@ -45,8 +47,13 @@ class View(OrganizationPermission, generic.UpdateView):
|
|||||||
return reverse('Settings:_device_model_view', args=(self.kwargs['pk'],))
|
return reverse('Settings:_device_model_view', args=(self.kwargs['pk'],))
|
||||||
|
|
||||||
|
|
||||||
|
@method_decorator(auth_decorator.permission_required("itam.change_devicemodel", raise_exception=True))
|
||||||
|
def post(self, request, *args, **kwargs):
|
||||||
|
|
||||||
|
return super().post(request, *args, **kwargs)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
class Add(PermissionRequiredMixin, OrganizationPermission, generic.CreateView):
|
|
||||||
model = DeviceModel
|
model = DeviceModel
|
||||||
permission_required = [
|
permission_required = [
|
||||||
'access.add_device_type',
|
'access.add_device_type',
|
||||||
|
Reference in New Issue
Block a user