search

ansible / django-ansible-base

Apache License 2.0
18 stars 45 forks source link

Lock down OAuth2 views #434

Closed relrod closed 5 months ago

relrod commented 5 months ago

Doing this properly with RBAC depends on #424.

For now, we limit Application views to superusers. We limit Token views using a custom DRF permission class based on what was specified in AWX's access.py

Signed-off-by: Rick Elrod rick@elrod.me

sonarcloud[bot] commented 5 months ago

Quality Gate Passed Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
90.7% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud