From 8d01c189f04f44f00231b8beaa6948003d833bd3 Mon Sep 17 00:00:00 2001 From: Bai Date: Thu, 14 Mar 2024 10:22:09 +0800 Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=AE=E5=A4=8D=20Playbook=20?= =?UTF-8?q?=E8=84=9A=E6=9C=AC=E6=96=87=E4=BB=B6=E9=97=AE=E9=A2=98?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- apps/ops/api/playbook.py | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/apps/ops/api/playbook.py b/apps/ops/api/playbook.py index 2bf52132c..d9ac1d6d4 100644 --- a/apps/ops/api/playbook.py +++ b/apps/ops/api/playbook.py @@ -79,9 +79,13 @@ class PlaybookFileBrowserAPIView(APIView): } protected_files = ['root', 'main.yml'] + def get_playbook(self, playbook_id): + playbook = get_object_or_404(Playbook, id=playbook_id, creator=self.request.user) + return playbook + def get(self, request, **kwargs): playbook_id = kwargs.get('pk') - playbook = get_object_or_404(Playbook, id=playbook_id) + playbook = self.get_playbook(playbook_id) work_path = playbook.work_dir file_key = request.query_params.get('key', '') if file_key: @@ -101,7 +105,7 @@ class PlaybookFileBrowserAPIView(APIView): def post(self, request, **kwargs): playbook_id = kwargs.get('pk') - playbook = get_object_or_404(Playbook, id=playbook_id) + playbook = self.get_playbook(playbook_id) work_path = playbook.work_dir parent_key = request.data.get('key', '') @@ -157,7 +161,7 @@ class PlaybookFileBrowserAPIView(APIView): def patch(self, request, **kwargs): playbook_id = kwargs.get('pk') - playbook = get_object_or_404(Playbook, id=playbook_id) + playbook = self.get_playbook(playbook_id) work_path = playbook.work_dir file_key = request.data.get('key', '') @@ -197,7 +201,7 @@ class PlaybookFileBrowserAPIView(APIView): def delete(self, request, **kwargs): playbook_id = kwargs.get('pk') - playbook = get_object_or_404(Playbook, id=playbook_id) + playbook = self.get_playbook(playbook_id) work_path = playbook.work_dir file_key = request.query_params.get('key', '') if not file_key: