Users should be able to edit/delete their own API tokens in the UI without explicit permission to do so #7507

Closed
opened 2025-12-29 20:24:29 +01:00 by adam · 1 comment
Owner

Originally created by @jeremystretch on GitHub (Jan 13, 2023).

Originally assigned to: @jeremystretch on GitHub.

NetBox version

v3.4.2

Python version

3.8

Steps to Reproduce

  1. Create a new user with no group or permission assignments.
  2. Log into NetBox as that user.
  3. Navigate to "API tokens" under the user menu at top right.
  4. Create a new API token.
  5. Attempt to edit or delete the token.

Expected Behavior

A user should be able to manage his or her own API tokens via the UI.

Observed Behavior

Users can create their own API tokens, but no ability to edit or delete them is offered without an administrator needing to assign the explicit permission to do so.

Originally created by @jeremystretch on GitHub (Jan 13, 2023). Originally assigned to: @jeremystretch on GitHub. ### NetBox version v3.4.2 ### Python version 3.8 ### Steps to Reproduce 1. Create a new user with no group or permission assignments. 2. Log into NetBox as that user. 3. Navigate to "API tokens" under the user menu at top right. 4. Create a new API token. 5. Attempt to edit or delete the token. ### Expected Behavior A user should be able to manage his or her own API tokens via the UI. ### Observed Behavior Users can create their own API tokens, but no ability to edit or delete them is offered without an administrator needing to assign the explicit permission to do so.
adam added the type: bugstatus: accepted labels 2025-12-29 20:24:29 +01:00
adam closed this issue 2025-12-29 20:24:29 +01:00
Author
Owner

@jeremystretch commented on GitHub (Jan 25, 2023):

Fixed in 6f74c5ec03

@jeremystretch commented on GitHub (Jan 25, 2023): Fixed in 6f74c5ec03305b7f597a839d35b2ee0c0e8f75ad
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#7507