mirror of
https://github.com/netbox-community/netbox.git
synced 2024-05-10 07:54:54 +00:00
21 lines
1.6 KiB
Markdown
21 lines
1.6 KiB
Markdown
# NetBox v2.8
|
|
|
|
## v2.9.0 (FUTURE)
|
|
|
|
### New Features
|
|
|
|
#### Object-Based Permissions ([#554](https://github.com/netbox-community/netbox/issues/554))
|
|
|
|
NetBox v2.9 replaces Django's built-in permissions framework with one that supports object-based assignment of permissions using arbitrary constraints. When granting a user or group to perform a certain action on one or more types of objects, an administrator can optionally specify a set of constraints. The permission will apply only to objects which match the specified constraints. For example, assigning permission to modify devices with the constraint `{"tenant__group__name": "Customers"}` would grant the permission only for devices assigned to a tenant belonging to the "Customers" group.
|
|
|
|
### Configuration Changes
|
|
|
|
* `REMOTE_AUTH_DEFAULT_PERMISSIONS` now takes a dictionary rather than a list. This is a mapping of permission names to a dictionary of constraining attributes, or `None`. For example, `['dcim.add_site', 'dcim.change_site']` would become `{'dcim.add_site': None, 'dcim.change_site': None}`.
|
|
|
|
### Other Changes
|
|
|
|
* The `secrets.activate_userkey` permission no longer exists. Instead, `secrets.change_userkey` is checked to determine whether a user has the ability to activate a UserKey.
|
|
* The `users.delete_token` permission is no longer enforced. All users are permitted to delete their own API tokens.
|
|
* Dropped backward compatibility for the `webhooks` Redis queue configuration (use `tasks` instead).
|
|
* Dropped backward compatibility for the `/admin/webhook-backend-status` URL (moved to `/admin/background-tasks/`).
|