enforce read access for team/child roles

2026-04-17 13:31:47 -05:00 · 2016-06-27 10:56:34 -04:00
parent fca4e75e03
commit ce3ce8d930
3 changed files with 7 additions and 7 deletions
--- a/awx/api/generics.py
+++ b/awx/api/generics.py
@@ -425,7 +425,7 @@ class SubListCreateAttachDetachAPIView(SubListCreateAPIView):
        sub = get_object_or_400(self.model, pk=sub_id)

        if not request.user.can_access(self.parent_model, 'unattach', parent,
-                                       sub, self.relationship):
+                                       sub, self.relationship, request.data):
            raise PermissionDenied()

        if parent_key: