zware/awx
1
0
Fork 0
mirror of https://github.com/ZwareBear/awx.git synced 2026-05-17 01:48:35 -05:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2098 from AlanCoding/u_no_copy

Browse Source 
Prohibit users without read_role from viewing copy endpoint
This commit is contained in:
Alan Rominger
2018-06-08 08:54:32 -04:00
committed by GitHub
parent f78f179789 ed762fd4b6
commit bcd9c5dada
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
awx/main/tests/functional/test_copy.py
+2 -1
View File
@@ -170,7 +170,7 @@ def test_credential_copy(post, get, machine_credential, credentialtype_ssh, admi
@pytest.mark.django_db
def test_notification_template_copy(post, get, notification_template_with_encrypt,
organization, alice):
#notification_template_with_encrypt.admin_role.members.add(alice)
notification_template_with_encrypt.organization.auditor_role.members.add(alice)
assert get(
reverse(
'api:notification_template_copy', kwargs={'pk': notification_template_with_encrypt.pk}
@@ -197,6 +197,7 @@ def test_notification_template_copy(post, get, notification_template_with_encryp
@pytest.mark.django_db
def test_inventory_script_copy(post, get, inventory_script, organization, alice):
inventory_script.organization.auditor_role.members.add(alice)
assert get(
reverse('api:inventory_script_copy', kwargs={'pk': inventory_script.pk}), alice, expect=200
).data['can_copy'] is False