github
/
jumpserver
mirror of https://github.com/jumpserver/jumpserver
1
0
Fork 0
Code Issues Releases Wiki Activity

fix: 工单批量更新没有权限

pull/12561/head
feng 2024-01-17 10:53:19 +08:00 committed by Bryan
parent 641e75a905
commit 13d4177531
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apps/tickets/api/ticket.py
View File

@ -4,6 +4,7 @@ from django.utils.translation import gettext_lazy as _
from rest_framework import viewsets from rest_framework import viewsets
from rest_framework.decorators import action from rest_framework.decorators import action
from rest_framework.exceptions import MethodNotAllowed from rest_framework.exceptions import MethodNotAllowed
from rest_framework.permissions import IsAuthenticated
from rest_framework.response import Response from rest_framework.response import Response
from audits.handler import create_or_update_operate_log from audits.handler import create_or_update_operate_log
@ -41,7 +42,6 @@ class TicketViewSet(CommonApiMixin, viewsets.ModelViewSet):
ordering = ('-date_created',) ordering = ('-date_created',)
rbac_perms = { rbac_perms = {
'open': 'tickets.view_ticket', 'open': 'tickets.view_ticket',
'bulk': 'tickets.change_ticket',
} }
def retrieve(self, request, *args, **kwargs): def retrieve(self, request, *args, **kwargs):
@ -122,7 +122,7 @@ class TicketViewSet(CommonApiMixin, viewsets.ModelViewSet):
self._record_operate_log(instance, TicketAction.close) self._record_operate_log(instance, TicketAction.close)
return Response('ok') return Response('ok')
@action(detail=False, methods=[PUT], permission_classes=[RBACPermission, ]) @action(detail=False, methods=[PUT], permission_classes=[IsAuthenticated, ])
def bulk(self, request, *args, **kwargs): def bulk(self, request, *args, **kwargs):
self.ticket_not_allowed() self.ticket_not_allowed()