Improper validation of permission on prefix/VLAN roles list #1203

Closed
opened 2025-12-29 16:30:01 +01:00 by adam · 0 comments
Owner

Originally created by @jeremystretch on GitHub (Aug 29, 2017).

Issue type

[ ] Feature request
[X] Bug report
[ ] Documentation

Environment

  • Python version: 3.4.3
  • NetBox version: 2.1.3

Description

When viewing the list of prefix/VLAN roles, the permission dcim.add_devicerole is used to determine whether to include the "Add a role" button. The correct permission is ipam.add_role.

Note: This is not a security concern, as the view itself evaluates the correct permission. It is merely a cosmetic error.

Originally created by @jeremystretch on GitHub (Aug 29, 2017). ### Issue type [ ] Feature request <!-- Requesting the implementation of a new feature --> [X] Bug report <!-- Reporting unexpected or erroneous behavior --> [ ] Documentation <!-- Proposing a modification to the documentation --> ### Environment * Python version: 3.4.3 * NetBox version: 2.1.3 ### Description When viewing the list of prefix/VLAN roles, the permission `dcim.add_devicerole` is used to determine whether to include the "Add a role" button. The correct permission is `ipam.add_role`. Note: This is not a security concern, as the view itself evaluates the correct permission. It is merely a cosmetic error.
adam added the type: bug label 2025-12-29 16:30:01 +01:00
adam closed this issue 2025-12-29 16:30:01 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#1203