From 6a131f70f0893e51f5f4f7619a2a09e36b2694e7 Mon Sep 17 00:00:00 2001 From: Jeff Bradberry Date: Thu, 13 Jan 2022 14:13:17 -0500 Subject: [PATCH] Require System Admin or Auditor permissions to access the mesh visualizer --- awx/api/views/mesh_visualizer.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/awx/api/views/mesh_visualizer.py b/awx/api/views/mesh_visualizer.py index 517f8762fb..741239cbfa 100644 --- a/awx/api/views/mesh_visualizer.py +++ b/awx/api/views/mesh_visualizer.py @@ -1,17 +1,19 @@ # Copyright (c) 2018 Red Hat, Inc. # All Rights Reserved. -from awx.main.models import InstanceLink, Instance from django.utils.translation import ugettext_lazy as _ from awx.api.generics import APIView, Response - +from awx.api.permissions import IsSystemAdminOrAuditor from awx.api.serializers import InstanceLinkSerializer, InstanceNodeSerializer +from awx.main.models import InstanceLink, Instance class MeshVisualizer(APIView): name = _("Mesh Visualizer") + permission_classes = (IsSystemAdminOrAuditor,) + swagger_topic = "System Configuration" def get(self, request, format=None):