From 25dcb9510c516c8d2677f67119c29466399536bc Mon Sep 17 00:00:00 2001
From: xinwen <coderWen@126.com>
Date: Wed, 19 Aug 2020 11:17:02 +0800
Subject: [PATCH] =?UTF-8?q?fix(audits):=20=E4=BF=AE=E5=A4=8D=E8=B6=85?=
 =?UTF-8?q?=E7=BA=A7=E5=AE=A1=E8=AE=A1=E5=91=98=E7=99=BB=E5=BD=95-?=
 =?UTF-8?q?=E6=97=A5=E5=BF=97=E5=AE=A1=E8=AE=A1-=E6=89=B9=E9=87=8F?=
 =?UTF-8?q?=E5=91=BD=E4=BB=A4-=E5=8D=95=E5=87=BB=E4=B8=BB=E6=9C=BA?=
 =?UTF-8?q?=E5=88=97=E9=93=BE=E6=8E=A5=E6=8A=A5=E9=94=99=E8=AF=AF=E4=BF=A1?=
 =?UTF-8?q?=E6=81=AF=20403?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/audits/api.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/audits/api.py b/apps/audits/api.py
index 0233bc1b2..71b15ceee 100644
--- a/apps/audits/api.py
+++ b/apps/audits/api.py
@@ -107,7 +107,7 @@ class CommandExecutionViewSet(ListModelMixin, OrgGenericViewSet):
 class CommandExecutionHostRelationViewSet(OrgRelationMixin, OrgBulkModelViewSet):
     serializer_class = CommandExecutionHostsRelationSerializer
     m2m_field = CommandExecution.hosts.field
-    permission_classes = (IsOrgAdmin,)
+    permission_classes = [IsOrgAdmin | IsOrgAuditor]
     filter_fields = [
         'id', 'asset', 'commandexecution'
     ]