mirror/netbox-community-netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2024-05-10 07:54:54 +00:00
Code

Check for the extras.run_script permission when running scripts via. the API

Browse Source
This commit is contained in:
kkthxbye-code
2023-01-13 22:12:12 +01:00
committed by Jeremy Stretch
parent d7c37d9dd6
commit fb3d1ef399
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
netbox/extras/api/views.py
View File

@ -318,6 +318,10 @@ class ScriptViewSet(ViewSet):
""" """
Run a Script identified as "<module>.<script>" and return the pending JobResult as the result Run a Script identified as "<module>.<script>" and return the pending JobResult as the result
""" """
if not request.user.has_perm('extras.run_script'):
raise PermissionDenied("This user does not have permission to run scripts.")
script = self._get_script(pk)() script = self._get_script(pk)()
input_serializer = serializers.ScriptInputSerializer(data=request.data) input_serializer = serializers.ScriptInputSerializer(data=request.data)

1
netbox/extras/tests/test_api.py
View File

@ -590,6 +590,7 @@ class ScriptTest(APITestCase):
@skipIf(not rq_worker_running, "RQ worker not running") @skipIf(not rq_worker_running, "RQ worker not running")
def test_run_script(self): def test_run_script(self):
self.add_permissions('extras.run_script')
script_data = { script_data = {
'var1': 'FooBar', 'var1': 'FooBar',