github
/
jumpserver
mirror of https://github.com/jumpserver/jumpserver
1
0
Fork 0
Code Issues Releases Wiki Activity

[Update] 修改命令/录像存储，创建/删除API的权限为SuperUser

pull/1945/head
BaiJiangJie 2018-10-28 02:17:46 +08:00
parent ebd92c79c7
commit 4f806f11f2
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
apps/common/api.py
View File

@ -11,7 +11,7 @@ from django.core.mail import get_connection, send_mail
from django.utils.translation import ugettext_lazy as _ from django.utils.translation import ugettext_lazy as _
from django.conf import settings from django.conf import settings
from .permissions import IsOrgAdmin from .permissions import IsOrgAdmin, IsSuperUser
from .serializers import MailTestSerializer, LDAPTestSerializer from .serializers import MailTestSerializer, LDAPTestSerializer
from .models import Setting from .models import Setting
@ -90,7 +90,7 @@ class LDAPTestingAPI(APIView):
class ReplayStorageCreateAPI(APIView): class ReplayStorageCreateAPI(APIView):
permission_classes = (IsOrgAdmin,) permission_classes = (IsSuperUser,)
def post(self, request): def post(self, request):
storage_data = request.data storage_data = request.data
@ -120,6 +120,7 @@ class ReplayStorageCreateAPI(APIView):
class ReplayStorageDeleteAPI(APIView): class ReplayStorageDeleteAPI(APIView):
permission_classes = (IsSuperUser,)
def post(self, request): def post(self, request):
storage_name = str(request.data.get('name')) storage_name = str(request.data.get('name'))
@ -128,7 +129,7 @@ class ReplayStorageDeleteAPI(APIView):
class CommandStorageCreateAPI(APIView): class CommandStorageCreateAPI(APIView):
permission_classes = (IsOrgAdmin,) permission_classes = (IsSuperUser,)
def post(self, request): def post(self, request):
storage_data = request.data storage_data = request.data
@ -153,7 +154,7 @@ class CommandStorageCreateAPI(APIView):
class CommandStorageDeleteAPI(APIView): class CommandStorageDeleteAPI(APIView):
permission_classes = (IsOrgAdmin,) permission_classes = (IsSuperUser,)
def post(self, request): def post(self, request):
storage_name = str(request.data.get('name')) storage_name = str(request.data.get('name'))