[PR #7440] [CLOSED] Added permission check /api/dcim/connected-devices #13243

New Issue

adam · 2025-12-29T22:26:12+01:00

adam commented

2025-12-29 22:26:12 +01:00

📋 Pull Request Information

Original PR: https://github.com/netbox-community/netbox/pull/7440
Author: @xraurp
Created: 10/5/2021
Status: ❌ Closed

Base: develop ← Head: connected_devices_permissions_fix

📝 Commits (1)

d6f6d0a Added permission check /api/dcim/connected-devices

📊 Changes

1 file changed (+7 additions, -0 deletions)

View changed files

📝 netbox/dcim/api/views.py (+7 -0)

📄 Description

Fixes: netbox-community/netbox#7051

Affects /api/dcim/connected-device/

Api now checks dcim.view_device and dcim.view_interface permissions when login is required.
If login is not required, endpoint is available without permissions as before.
Set LOGIN_REQUIRED = True in configuration for this change to take effect.

Error message when permission is not sufficient:

HTTP 403 Forbidden
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "detail": "You do not have permission to perform this action."
}

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/netbox-community/netbox/pull/7440 **Author:** [@xraurp](https://github.com/xraurp) **Created:** 10/5/2021 **Status:** ❌ Closed **Base:** `develop` ← **Head:** `connected_devices_permissions_fix` --- ### 📝 Commits (1) - [`d6f6d0a`](https://github.com/netbox-community/netbox/commit/d6f6d0acf5acdbeee1e4740e8c9ec27d90c2cde9) Added permission check /api/dcim/connected-devices ### 📊 Changes **1 file changed** (+7 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `netbox/dcim/api/views.py` (+7 -0) </details> ### 📄 Description ### Fixes: netbox-community/netbox#7051 Affects `/api/dcim/connected-device/` Api now checks `dcim.view_device` and `dcim.view_interface` permissions when login is required. If login is not required, endpoint is available without permissions as before. Set `LOGIN_REQUIRED = True` in configuration for this change to take effect. Error message when permission is not sufficient: ``` HTTP 403 Forbidden Allow: GET, HEAD, OPTIONS Content-Type: application/json Vary: Accept { "detail": "You do not have permission to perform this action." } ``` --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

adam added the pull-request label 2025-12-29 22:26:12 +01:00

adam closed this issue

2025-12-29 22:26:12 +01:00

adam referenced this issue

2025-12-29 23:22:45 +01:00

[PR #13243] [MERGED] Fixes #13233 - Remove vlan_group from nullable fields in InterfaceBulkEditForm #14137

Sign in to join this conversation.

Branches Tags

main

update-changelog-comments-docs

feature-removal-issue-type

20911-dropdown

20239-plugin-menu-classes-mutable-state

21097-graphql-id-lookups

feature

fix_module_substitution

20923-dcim-templates

20044-elevation-stuck-lightmode

feature-ip-prefix-link

v4.5-beta1-release

20068-import-moduletype-attrs

20766-fix-german-translation-code-literals

20378-del-script

7604-filter-modifiers-v3

circuit-swap

12318-case-insensitive-uniqueness

20637-improve-device-q-filter

20660-script-load

19724-graphql

20614-update-ruff

14884-script

02496-max-page

19720-macaddress-interface-generic-relation

19408-circuit-terminations-export-templates

20203-openapi-check

fix-19669-api-image-download

7604-filter-modifiers

19275-fixes-interface-bulk-edit

fix-17794-get_field_value_return_list

11507-show-aggregate-and-rir-on-api

9583-add_column_specific_search_field_to_tables

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/netbox#13243