fix(settings): Add correct permissions for device model view/update
!13
This commit is contained in:
@ -1,5 +1,6 @@
|
||||
from django.contrib.auth.mixins import PermissionRequiredMixin
|
||||
from django.contrib.auth import decorators as auth_decorator
|
||||
from django.urls import reverse
|
||||
from django.utils.decorators import method_decorator
|
||||
from django.views import generic
|
||||
|
||||
from access.mixin import OrganizationPermission
|
||||
@ -13,7 +14,8 @@ from settings.models.user_settings import UserSettings
|
||||
class View(OrganizationPermission, generic.UpdateView):
|
||||
model = DeviceModel
|
||||
permission_required = [
|
||||
'itam.view_device_type'
|
||||
'itam.view_devicemodel',
|
||||
'itam.change_devicemodel',
|
||||
]
|
||||
template_name = 'form.html.j2'
|
||||
|
||||
@ -45,8 +47,13 @@ class View(OrganizationPermission, generic.UpdateView):
|
||||
return reverse('Settings:_device_model_view', args=(self.kwargs['pk'],))
|
||||
|
||||
|
||||
@method_decorator(auth_decorator.permission_required("itam.change_devicemodel", raise_exception=True))
|
||||
def post(self, request, *args, **kwargs):
|
||||
|
||||
return super().post(request, *args, **kwargs)
|
||||
|
||||
|
||||
|
||||
class Add(PermissionRequiredMixin, OrganizationPermission, generic.CreateView):
|
||||
model = DeviceModel
|
||||
permission_required = [
|
||||
'access.add_device_type',
|
||||
|
Reference in New Issue
Block a user