Cannot assign IP address from Interface without add ip_address rights. #9265

New Issue

adam · 2025-12-29T20:47:40+01:00

adam commented

2025-12-29 20:47:40 +01:00

Originally created by @rkiss on GitHub (Feb 18, 2024).

Deployment Type

Self-hosted

NetBox Version

v3.7.2

Python Version

3.8

Steps to Reproduce

Create Device with one interface
Create ip address
Switch to a user that does not have add ip_address right (but have view and change ip_address rights)
Try to assign the ip to the interface from one of the following pages:

device view, interfaces tab (dcim/devices//interfaces/
Interfaces view (dcim/interfaces//)

Expected Behavior

An action should be present that allow the user to navigate to the assign ip address page.

Observed Behavior

The "Create IP address" (from devices/interfaces tab) or "Add IP address" (from interface view) is not present so the page cannot be triggered.
Of course, the "add ip address" that those action could trigger would fail (ipam/ip-addresses/add/?interface=&return_url=/dcim/devices//interfaces/) with no permission error.
But the assign page from (ipam/ip-addresses/assign/?interface=&return_url=/dcim/devices//interfaces/) would work however the user cannot trigger that page because there is no dedicated button for it.
The only way the user can assign an ip is by editing the ip address record.

I think that there should a single "add-or-assign IP address" page that have 2 tabs for creating an address or assigning one which will be visible only if the user have the corresponding rights: add or edit. Then, the action will be visible on the interface if the use have at least one of the rights.

Originally created by @rkiss on GitHub (Feb 18, 2024). ### Deployment Type Self-hosted ### NetBox Version v3.7.2 ### Python Version 3.8 ### Steps to Reproduce Create Device with one interface Create ip address Switch to a user that does not have add ip_address right (but have view and change ip_address rights) Try to assign the ip to the interface from one of the following pages: - device view, interfaces tab (dcim/devices/<ID>/interfaces/ - Interfaces view (dcim/interfaces/<ID>/) ### Expected Behavior An action should be present that allow the user to navigate to the assign ip address page. ### Observed Behavior The "Create IP address" (from devices/interfaces tab) or "Add IP address" (from interface view) is not present so the page cannot be triggered. Of course, the "add ip address" that those action could trigger would fail (ipam/ip-addresses/add/?interface=<ID>&return_url=/dcim/devices/<ID>/interfaces/) with no permission error. But the assign page from (ipam/ip-addresses/assign/?interface=<ID>&return_url=/dcim/devices/<ID>/interfaces/) would work however the user cannot trigger that page because there is no dedicated button for it. The only way the user can assign an ip is by editing the ip address record. I think that there should a single "add-or-assign IP address" page that have 2 tabs for creating an address or assigning one which will be visible only if the user have the corresponding rights: add or edit. Then, the action will be visible on the interface if the use have at least one of the rights.

adam closed this issue

2025-12-29 20:47:40 +01:00

adam commented

2025-12-29 20:47:40 +01:00

@jeremystretch commented on GitHub (Feb 20, 2024):

The only way the user can assign an ip is by editing the ip address record.

Yes, this is the intended workflow. These links are not shown because they go to the creation form form for IP addresses, which the user does not have permission to access. Instead, the user can navigate to the relevant IP address and assign it to the desired interface. Alternatively, you can grant the user permission to create IP addresses.

@jeremystretch commented on GitHub (Feb 20, 2024): > The only way the user can assign an ip is by editing the ip address record. Yes, this is the intended workflow. These links are not shown because they go to the creation form form for IP addresses, which the user does not have permission to access. Instead, the user can navigate to the relevant IP address and assign it to the desired interface. Alternatively, you can grant the user permission to create IP addresses.

Sign in to join this conversation.

Branches Tags

main

update-changelog-comments-docs

feature-removal-issue-type

20911-dropdown

20239-plugin-menu-classes-mutable-state

21097-graphql-id-lookups

feature

fix_module_substitution

20923-dcim-templates

20044-elevation-stuck-lightmode

feature-ip-prefix-link

v4.5-beta1-release

20068-import-moduletype-attrs

20766-fix-german-translation-code-literals

20378-del-script

7604-filter-modifiers-v3

circuit-swap

12318-case-insensitive-uniqueness

20637-improve-device-q-filter

20660-script-load

19724-graphql

20614-update-ruff

14884-script

02496-max-page

19720-macaddress-interface-generic-relation

19408-circuit-terminations-export-templates

20203-openapi-check

fix-19669-api-image-download

7604-filter-modifiers

19275-fixes-interface-bulk-edit

fix-17794-get_field_value_return_list

11507-show-aggregate-and-rir-on-api

9583-add_column_specific_search_field_to_tables

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/netbox#9265