fix(virtualization): Hide VM Add Components dropdown without change permission (#21634)

Wrap the VirtualMachine "Add Components" dropdown in a
`virtualization.change_virtualmachine` permission check to match Device
behavior and prevent users without change permission from seeing
component add actions.

Fixes #21580
This commit is contained in:
Martin Hauser
2026-03-12 17:30:40 +01:00
committed by GitHub
parent 675e68f276
commit fea6ad61fd

View File

@@ -16,7 +16,7 @@
{% endblock %}
{% block extra_controls %}
{% if perms.virtualization.change_virtualmachine %}
<div class="dropdown">
<button id="add-components" type="button" class="btn btn-primary dropdown-toggle" data-bs-toggle="dropdown" aria-expanded="false">
<i class="mdi mdi-plus-thick" aria-hidden="true"></i> {% trans "Add Components" %}
@@ -34,5 +34,5 @@
{% endif %}
</ul>
</div>
{% endif %}
{% endblock %}