j3d1/webvirtcloud
1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-11 12:46:49 +00:00
Code Issues Projects Releases Wiki Activity

feat(security): apply Codex review hardening to console tokens and superuser authorization

Browse source
This commit is contained in:
catborise 2026-09-27 11:30:03 +03:00
parent 1227674d8f
commit 708b986e8e
11 changed files with 168 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

9
computes/api/viewsets.py
View file

@ -1,5 +1,6 @@
from admin.permissions import IsSuperUser
from computes.models import Compute
from rest_framework import permissions, viewsets
from rest_framework import viewsets
from rest_framework.response import Response
from vrtManager.create import wvmCreate
@ -13,11 +14,11 @@ class ComputeViewSet(viewsets.ModelViewSet):
queryset = Compute.objects.all().order_by("name")
serializer_class = ComputeSerializer
permission_classes = [permissions.IsAdminUser]
permission_classes = [IsSuperUser]
class ComputeArchitecturesView(viewsets.ViewSet):
permission_classes = [permissions.IsAdminUser]
permission_classes = [IsSuperUser]
def list(self, request, compute_pk=None):
"""
@ -44,7 +45,7 @@ class ComputeArchitecturesView(viewsets.ViewSet):
class ComputeMachinesView(viewsets.ViewSet):
permission_classes = [permissions.IsAdminUser]
permission_classes = [IsSuperUser]
def list(self, request, compute_pk=None, archs_pk=None):
"""