diff --git a/apps/ops/api/playbook.py b/apps/ops/api/playbook.py index 12e5b0659..7e5a1fc25 100644 --- a/apps/ops/api/playbook.py +++ b/apps/ops/api/playbook.py @@ -62,10 +62,10 @@ class PlaybookFileBrowserAPIView(APIView): rbac_perms = () permission_classes = (RBACPermission,) rbac_perms = { - 'GET': 'ops.change_playbooks', - 'POST': 'ops.change_playbooks', - 'DELETE': 'ops.change_playbooks', - 'PATCH': 'ops.change_playbooks', + 'GET': 'ops.change_playbook', + 'POST': 'ops.change_playbook', + 'DELETE': 'ops.change_playbook', + 'PATCH': 'ops.change_playbook', } protected_files = ['root', 'main.yml'] diff --git a/apps/ops/views.py b/apps/ops/views.py index 85aa94c65..ccff2aa21 100644 --- a/apps/ops/views.py +++ b/apps/ops/views.py @@ -13,7 +13,7 @@ class CeleryTaskLogView(PermissionsMixin, TemplateView): template_name = 'ops/celery_task_log.html' permission_classes = [RBACPermission] rbac_perms = { - 'GET': 'ops.view_celerytask' + 'GET': 'ops.view_celerytaskexecution' } def get_context_data(self, **kwargs): diff --git a/apps/rbac/builtin.py b/apps/rbac/builtin.py index a36ee5eea..cf80c64ab 100644 --- a/apps/rbac/builtin.py +++ b/apps/rbac/builtin.py @@ -22,6 +22,7 @@ user_perms = ( ("ops", "playbook", "*", "*"), ("ops", "job", "*", "*"), ("ops", "jobexecution", "*", "*"), + ("ops", "celerytaskexecution", "view", "*"), ) system_user_perms = (