RomanNum3ral
/
netbox
mirror of https://github.com/netbox-community/netbox.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
netbox/netbox/users
History
Jason Novinger 8c73f46cc9
Fixes #22507: Check is_active in restrict() and IsSuperuser superuser bypass (#22508) 
RestrictedQuerySet.restrict() and IsSuperuser short-circuited on is_superuser
without checking is_active, so a deactivated superuser was granted the full
superuser bypass. restrict() in particular fails open, returning the
unrestricted queryset. Both now also require is_active, matching the existing
guard in ObjectPermissionMixin.has_perm.
 		2026-06-22 22:03:33 +02:00
..
api Closes #22429: Enforce ObjectPermission constraints on grant_token (#22424) 2026-06-11 13:30:27 -07:00
forms Closes #22429: Enforce ObjectPermission constraints on grant_token (#22424) 2026-06-11 13:30:27 -07:00
graphql refactor(graphql): Update filter lookups for strawberry-django 0.86 2026-06-16 08:50:03 -04:00
migrations Add migration files for indexes 2026-04-03 16:32:08 -04:00
models Closes #22457: Use `hmac.compare_digest()` to authenticate API tokens (#22458) 2026-06-16 04:51:36 -05:00
tests Fixes #22507: Check is_active in restrict() and IsSuperuser superuser bypass (#22508) 2026-06-22 22:03:33 +02:00
ui Fixes #22340: Correct display of allowed IPs for tokens in web UI 2026-06-02 12:39:05 -04:00
__init__.py Initial push to public repo 2016-03-01 11:23:03 -05:00
apps.py Fixes #21407: Enable I (isort) and stabilize import ordering (#21458) 2026-02-18 10:41:51 -06:00
choices.py Initial work on #20210 2025-10-02 15:04:29 -04:00
constants.py Fixes #21357: Add support for registering custom model actions (#21560) 2026-04-13 08:37:09 -04:00
filterset_mixins.py Fixes #21407: Enable I (isort) and stabilize import ordering (#21458) 2026-02-18 10:41:51 -06:00
filtersets.py chore(ruff): Enable RET rules and add explicit fallbacks 2026-02-18 16:49:36 -05:00
preferences.py add ENABLE_TRANSLATION setting to optionally turn translation off (#16096) 2024-05-14 09:21:00 -04:00
signals.py Fixes #20915: Ensure preferred language is applied during SSO login (#21590) 2026-03-06 10:00:33 -06:00
tables.py Fixes #21358: Prevent exception when sorting by Token column (#21391) 2026-02-12 00:21:49 +01:00
urls.py Fixes #21407: Enable I (isort) and stabilize import ordering (#21458) 2026-02-18 10:41:51 -06:00
utils.py Closes #22429: Enforce ObjectPermission constraints on grant_token (#22424) 2026-06-11 13:30:27 -07:00
views.py Closes #22429: Enforce ObjectPermission constraints on grant_token (#22424) 2026-06-11 13:30:27 -07:00