nofusscomputing/centurion_erp
1
0
Fork 0
Code Issues Wiki Activity

fix(api): corrct device permissions

Browse Source 
!16
This commit is contained in:
Jon Lockwood
2024-06-02 01:03:52 +09:30
parent 33b1a6c91d
commit 95dc979419
2 changed files with 14 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
app/api/serializers/itam/device.py
View File

@ -28,5 +28,6 @@ class DeviceSerializer(serializers.ModelSerializer):
'inventorydate', 'inventorydate',
'is_global', 'is_global',
'organization', 'organization',
'slug',
] ]

16
app/api/views/itam/device/detail.py
View File

@ -3,11 +3,16 @@
from rest_framework import generics from rest_framework import generics
from itam.models.device import Device from itam.models.device import Device
from api.serializers.itam.device import DeviceSerializer
from api.serializers.itam.device import DeviceSerializer
from api.views.mixin import OrganizationPermissionAPI
class List(generics.ListCreateAPIView): class List(generics.ListCreateAPIView):
permission_required = 'itam.view_device'
permission_classes = [
OrganizationPermissionAPI
]
queryset = Device.objects.all() queryset = Device.objects.all()
serializer_class = DeviceSerializer serializer_class = DeviceSerializer
@ -16,8 +21,13 @@ class List(generics.ListCreateAPIView):
class Detail(generics.RetrieveUpdateDestroyAPIView): class Detail(generics.RetrieveUpdateDestroyAPIView):
permission_required = 'itam.view_device'
permission_classes = [
OrganizationPermissionAPI
]
queryset = Device.objects.all() queryset = Device.objects.all()
serializer_class = DeviceSerializer serializer_class = DeviceSerializer
def get_view_name(self): def get_view_name(self):