From 1b4c52bc9f71d4620728a8863c1888db6acf4ace Mon Sep 17 00:00:00 2001
From: Aaron3S <chenyang@fit2cloud.com>
Date: Tue, 14 Feb 2023 18:54:04 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E5=A2=9E=E5=8A=A0=E4=BD=9C=E4=B8=9A?=
 =?UTF-8?q?=E4=B8=AD=E5=BF=83=E5=BC=80=E5=85=B3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/ops/api/job.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/apps/ops/api/job.py b/apps/ops/api/job.py
index ae9748964..f473d9861 100644
--- a/apps/ops/api/job.py
+++ b/apps/ops/api/job.py
@@ -1,3 +1,4 @@
+from django.conf import settings
 from django.db.models import Count
 from django.db.transaction import atomic
 from rest_framework.views import APIView
@@ -30,6 +31,11 @@ class JobViewSet(OrgBulkModelViewSet):
     search_fields = ('name', 'comment')
     model = Job
 
+    def check_permissions(self, request):
+        if not settings.SECURITY_COMMAND_EXECUTION:
+            return self.permission_denied(request, "Command execution disabled")
+        return super().check_permissions(request)
+
     def allow_bulk_destroy(self, qs, filtered):
         return True