mirror/netbox-community-netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2024-05-10 07:54:54 +00:00
Code

Dissuade non-superusers from creating API tokens via the admin view

Browse Source
This commit is contained in:
Jeremy Stretch
2024-04-19 14:05:45 -04:00
parent 3551f3e021
commit 824d66a54c
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
netbox/templates/users/token_edit.html Normal file
View File

@ -0,0 +1,9 @@
{% extends 'generic/object_edit.html' %}
{% load i18n %}
{% block content %}
{% if not request.user.is_superuser %}
{% include 'inc/alerts/warning.html' with title="Creating API Tokens" message="Non-superusers should generally create and modify API tokens under their user profile." %}
{% endif %}
{{ block.super }}
{% endblock %}

1
netbox/users/views.py
View File

@ -28,6 +28,7 @@ class TokenView(generic.ObjectView):
class TokenEditView(generic.ObjectEditView):
queryset = Token.objects.all()
form = forms.TokenForm
template_name = 'users/token_edit.html'
@register_model_view(Token, 'delete')