github
/
jumpserver
mirror of https://github.com/jumpserver/jumpserver
1
0
Fork 0
Code Issues Releases Wiki Activity

feat: 修改api的权限

pull/4078/head
ibuler 2020-06-04 14:55:33 +08:00
parent 420f3c0c4c
commit e6cd126045
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apps/jumpserver/api.py
View File

@ -10,7 +10,7 @@ from users.models import User
from assets.models import Asset
from terminal.models import Session
from orgs.utils import current_org
from common.permissions import IsOrgAdmin
from common.permissions import IsOrgAdmin, IsOrgAuditor
from common.utils import lazyproperty
__all__ = ['IndexApi']
@ -224,7 +224,7 @@ class TotalCountMixin:
class IndexApi(TotalCountMixin, DatesLoginMetricMixin, APIView):
permission_classes = (IsOrgAdmin,)
permission_classes = (IsOrgAdmin | IsOrgAuditor,)
http_method_names = ['get']
def get(self, request, *args, **kwargs):

2
apps/terminal/api/session.py
View File

@ -59,7 +59,7 @@ class SessionViewSet(OrgBulkModelViewSet):
return super().perform_create(serializer)
def get_permissions(self):
if self.request.method.lower() in ['get']:
if self.request.method.lower() in ['get', 'options']:
self.permission_classes = (IsOrgAdminOrAppUser | IsOrgAuditor, )
return super().get_permissions()