Permissions constraints are not applied to instances count within a device type #4497

Closed
opened 2025-12-29 18:36:38 +01:00 by adam · 2 comments
Owner

Originally created by @cpmills1975 on GitHub (Jan 26, 2021).

Environment

  • Python version: 3.9
  • NetBox version: 2.10.3

Steps to Reproduce

Similar to #5681

  1. Create a device type (devicetype_a)
  2. Create two device of devicetype_a (name "device_a" and "device_b")
  3. Create a permissions rule that grants view permissions on dcim > device, but limit the devices visible to just one of the devices with a suitable constraint e.g. { "name": "device_a" }
  4. Create a permissions rule that grants view permissions on dcim > device types
  5. View the list of device types /dcim/device-types
  6. Observe the number of instances of devicetype_a is 2
  7. Click on the instance count 2 to view the list of devices of type devicetype_a
  8. Observe that only one device (device_a) is shown

Expected Behavior

/dcim/device-types should show only one instance of devicetype_a

Observed Behavior

There appears to be two devices of devicetype_a, but the test user can only see one.

Originally created by @cpmills1975 on GitHub (Jan 26, 2021). <!-- NOTE: IF YOUR ISSUE DOES NOT FOLLOW THIS TEMPLATE, IT WILL BE CLOSED. This form is only for reporting reproducible bugs. If you need assistance with NetBox installation, or if you have a general question, please start a discussion instead: https://github.com/netbox-community/netbox/discussions Please describe the environment in which you are running NetBox. Be sure that you are running an unmodified instance of the latest stable release before submitting a bug report, and that any plugins have been disabled. --> ### Environment * Python version: 3.9 * NetBox version: 2.10.3 <!-- Describe in detail the exact steps that someone else can take to reproduce this bug using the current stable release of NetBox. Begin with the creation of any necessary database objects and call out every operation being performed explicitly. If reporting a bug in the REST API, be sure to reconstruct the raw HTTP request(s) being made: Don't rely on a client library such as pynetbox. --> ### Steps to Reproduce Similar to #5681 1. Create a device type (devicetype_a) 2. Create two device of devicetype_a (name "device_a" and "device_b") 3. Create a permissions rule that grants view permissions on dcim > device, but limit the devices visible to just one of the devices with a suitable constraint e.g. { "name": "device_a" } 4. Create a permissions rule that grants view permissions on dcim > device types 5. View the list of device types /dcim/device-types 6. Observe the number of instances of devicetype_a is 2 7. Click on the instance count 2 to view the list of devices of type devicetype_a 8. Observe that only one device (device_a) is shown <!-- What did you expect to happen? --> ### Expected Behavior /dcim/device-types should show only one instance of devicetype_a <!-- What happened instead? --> ### Observed Behavior There appears to be two devices of devicetype_a, but the test user can only see one.
adam added the pending closure label 2025-12-29 18:36:38 +01:00
adam closed this issue 2025-12-29 18:36:38 +01:00
Author
Owner

@stale[bot] commented on GitHub (Mar 19, 2021):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. NetBox is governed by a small group of core maintainers which means not all opened issues may receive direct feedback. Please see our contributing guide.

@stale[bot] commented on GitHub (Mar 19, 2021): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. NetBox is governed by a small group of core maintainers which means not all opened issues may receive direct feedback. Please see our [contributing guide](https://github.com/netbox-community/netbox/blob/develop/CONTRIBUTING.md).
Author
Owner

@github-actions[bot] commented on GitHub (Apr 14, 2021):

This issue has been automatically closed due to lack of activity. In an effort to reduce noise, please do not comment any further. Note that the core maintainers may elect to reopen this issue at a later date if deemed necessary.

@github-actions[bot] commented on GitHub (Apr 14, 2021): This issue has been automatically closed due to lack of activity. In an effort to reduce noise, please do not comment any further. Note that the core maintainers may elect to reopen this issue at a later date if deemed necessary.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#4497