Individual tags are viewable without the view_tag permission #3260

Closed
opened 2025-12-29 18:27:11 +01:00 by adam · 0 comments
Owner

Originally created by @jeremystretch on GitHub (Jan 31, 2020).

Originally assigned to: @jeremystretch on GitHub.

Environment

  • Python version: 3.6.8
  • NetBox version: 2.7.3

Steps to Reproduce

  1. Log in as a user with no permissions
  2. Navigate to view a specific tag, e.g. /extras/tags/foo/

Expected Behavior

Permissions should be denied, as the user does not possess the extras.view_tag permission.

Observed Behavior

The tag is displayed.

Originally created by @jeremystretch on GitHub (Jan 31, 2020). Originally assigned to: @jeremystretch on GitHub. ### Environment * Python version: 3.6.8 * NetBox version: 2.7.3 ### Steps to Reproduce 1. Log in as a user with no permissions 2. Navigate to view a specific tag, e.g. `/extras/tags/foo/` ### Expected Behavior Permissions should be denied, as the user does not possess the `extras.view_tag` permission. ### Observed Behavior The tag is displayed.
adam added the type: bugstatus: accepted labels 2025-12-29 18:27:12 +01:00
adam closed this issue 2025-12-29 18:27:12 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#3260