zware/awx
1
0
Fork 0
mirror of https://github.com/ZwareBear/awx.git synced 2026-04-08 09:01:47 -05:00
Code Issues Packages Projects Releases Wiki Activity

granularly prevent filtering oauth secrets

Browse Source
This commit is contained in:
adamscmRH
2018-04-27 16:39:37 -04:00
parent 7781667977
commit 4197a9fd35
3 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
awx/api/filters.py
View File

@@ -121,8 +121,6 @@ def get_field_from_path(model, path):
new_parts.append(name_alt)
else:
field = model._meta.get_field(name)
if 'auth' in name or 'token' in name:
raise PermissionDenied(_('Filtering on %s is not allowed.' % name))
if isinstance(field, ForeignObjectRel) and getattr(field.field, '__prevent_search__', False):
raise PermissionDenied(_('Filtering on %s is not allowed.' % name))
elif getattr(field, '__prevent_search__', False):