starred/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2026-01-11 21:10:29 +01:00
Code Issues 273 Packages Projects Releases 10 Wiki Activity

Creation of next available IP address via REST API requires extraneous permission #3767

New Issue
Closed
opened 2025-12-29 18:31:07 +01:00 by adam · 0 comments
adam commented 2025-12-29 18:31:07 +01:00
Owner
Copy Link

Originally created by @jeremystretch on GitHub (Jun 10, 2020).

Originally assigned to: @jeremystretch on GitHub.

Environment

  • Python version: 3.6.9
  • NetBox version: 2.8.5

Steps to Reproduce

  1. Create a user with permission to create IP addresses but not prefixes
  2. Assign the user a REST API token with write ability
  3. Create a new prefix and note its numeric ID
  4. Make the following API call in an attempt to create an available IP address within the prefix:
curl -X POST \
-H "Authorization: Token  $TOKEN" \
-H "Content-Type: application/json" \
-H "Accept: application/json; indent=4" \
http://localhost:8000/api/ipam/prefixes/$PREFIX_ID/available-ips/

Expected Behavior

A 201 response should be received indicating the creation of a new IP address.

Observed Behavior

Received a 403 error indicating lack of permission to perform this operation. After assigning the user permission to create a prefix, the request succeeds as expected.

Originally created by @jeremystretch on GitHub (Jun 10, 2020). Originally assigned to: @jeremystretch on GitHub. ### Environment * Python version: 3.6.9 * NetBox version: 2.8.5 ### Steps to Reproduce 1. Create a user with permission to create IP addresses but not prefixes 2. Assign the user a REST API token with write ability 3. Create a new prefix and note its numeric ID 3. Make the following API call in an attempt to create an available IP address within the prefix: ``` curl -X POST \ -H "Authorization: Token $TOKEN" \ -H "Content-Type: application/json" \ -H "Accept: application/json; indent=4" \ http://localhost:8000/api/ipam/prefixes/$PREFIX_ID/available-ips/ ``` ### Expected Behavior A 201 response should be received indicating the creation of a new IP address. ### Observed Behavior Received a 403 error indicating lack of permission to perform this operation. After assigning the user permission to create a prefix, the request succeeds as expected.
adam added the type: bugstatus: accepted labels 2025-12-29 18:31:07 +01:00
adam closed this issue 2025-12-29 18:31:08 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
beta
breaking change
complexity: high
complexity: low
complexity: medium
needs milestone
netbox
pending closure
plugin candidate
pull-request
Mirrored from GitHub Pull Request
 severity: high
severity: low
severity: medium
status: accepted
status: backlog
status: blocked
status: duplicate
status: needs owner
status: needs triage
status: revisions needed
status: under review
topic: GraphQL
topic: Internationalization
topic: OpenAPI
topic: UI/UX
topic: cabling
topic: event rules
topic: htmx navigation
topic: industrialization
topic: migrations
topic: plugins
topic: scripts
topic: templating
topic: testing
type: bug
type: deprecation
type: documentation
type: feature
type: housekeeping
type: translation
No Label status: accepted type: bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#3767
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?