starred/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2026-01-11 21:10:29 +01:00
Code Issues 273 Packages Projects Releases 10 Wiki Activity

List of tagged objects does not comply constraints for permissions #6990

New Issue
Closed
opened 2025-12-29 19:47:31 +01:00 by adam · 3 comments
adam commented 2025-12-29 19:47:31 +01:00
Owner
Copy Link

Originally created by @lepazca on GitHub (Sep 15, 2022).

NetBox version

v3.3.2

Python version

3.10

Steps to Reproduce

  1. Click en Other > Tags
  2. Click on any tag

Expected Behavior

The user should only view the objects that match the his constraints for permission.

Observed Behavior

The user can list all objects for any chosen tag, even if not match the imposed his constraints for permission.

Originally created by @lepazca on GitHub (Sep 15, 2022). ### NetBox version v3.3.2 ### Python version 3.10 ### Steps to Reproduce 1. Click en Other > Tags 2. Click on any tag ### Expected Behavior The user should only view the objects that match the his constraints for permission. ### Observed Behavior The user can list all objects for any chosen tag, even if not match the imposed his constraints for permission.
adam closed this issue 2025-12-29 19:47:31 +01:00
adam commented 2025-12-29 19:47:31 +01:00
Author
Owner
Copy Link

@jeremystretch commented on GitHub (Sep 15, 2022):

This is expected behavior. View permissions do not hide that an object exists; they prevent a user from accessing the details of that object.

@jeremystretch commented on GitHub (Sep 15, 2022): This is expected behavior. View permissions do not hide that an object exists; they prevent a user from accessing the details of that object.
adam commented 2025-12-29 19:47:31 +01:00
Author
Owner
Copy Link

@lepazca commented on GitHub (Sep 15, 2022):

Apology for reopening this.

I'm trying to use tags for accomplish multi tenancy. The only thing, that I'm aware of, that prevent that a given user can see any other object except his is the possibility to list tagged objects. I maintained the possibility to view the created tags so they can use it during the creation of a new object.

Maybe this is not the right way to do this.

@lepazca commented on GitHub (Sep 15, 2022): Apology for reopening this. I'm trying to use tags for accomplish multi tenancy. The only thing, that I'm aware of, that prevent that a given user can see any other object except his is the possibility to list tagged objects. I maintained the possibility to view the created tags so they can use it during the creation of a new object. Maybe this is not the right way to do this.
adam commented 2025-12-29 19:47:31 +01:00
Author
Owner
Copy Link

@lepazca commented on GitHub (Sep 15, 2022):

I will move this to Discussions.

@lepazca commented on GitHub (Sep 15, 2022): I will move this to Discussions.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
beta
breaking change
complexity: high
complexity: low
complexity: medium
needs milestone
netbox
pending closure
plugin candidate
pull-request
Mirrored from GitHub Pull Request
 severity: high
severity: low
severity: medium
status: accepted
status: backlog
status: blocked
status: duplicate
status: needs owner
status: needs triage
status: revisions needed
status: under review
topic: GraphQL
topic: Internationalization
topic: OpenAPI
topic: UI/UX
topic: cabling
topic: event rules
topic: htmx navigation
topic: industrialization
topic: migrations
topic: plugins
topic: scripts
topic: templating
topic: testing
type: bug
type: deprecation
type: documentation
type: feature
type: housekeeping
type: translation
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#6990
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?