fix(settings): Add correct permissions for device model view/update

!13
This commit is contained in:
2024-05-29 06:44:34 +09:30
parent 7f7f719731
commit 608a38384d

View File

@ -1,5 +1,6 @@
from django.contrib.auth.mixins import PermissionRequiredMixin from django.contrib.auth import decorators as auth_decorator
from django.urls import reverse from django.urls import reverse
from django.utils.decorators import method_decorator
from django.views import generic from django.views import generic
from access.mixin import OrganizationPermission from access.mixin import OrganizationPermission
@ -13,7 +14,8 @@ from settings.models.user_settings import UserSettings
class View(OrganizationPermission, generic.UpdateView): class View(OrganizationPermission, generic.UpdateView):
model = DeviceModel model = DeviceModel
permission_required = [ permission_required = [
'itam.view_device_type' 'itam.view_devicemodel',
'itam.change_devicemodel',
] ]
template_name = 'form.html.j2' template_name = 'form.html.j2'
@ -45,8 +47,13 @@ class View(OrganizationPermission, generic.UpdateView):
return reverse('Settings:_device_model_view', args=(self.kwargs['pk'],)) return reverse('Settings:_device_model_view', args=(self.kwargs['pk'],))
@method_decorator(auth_decorator.permission_required("itam.change_devicemodel", raise_exception=True))
def post(self, request, *args, **kwargs):
return super().post(request, *args, **kwargs)
class Add(PermissionRequiredMixin, OrganizationPermission, generic.CreateView):
model = DeviceModel model = DeviceModel
permission_required = [ permission_required = [
'access.add_device_type', 'access.add_device_type',