From b0148ffadd00099032e5040e0372b28f9a6d1396 Mon Sep 17 00:00:00 2001 From: Bai Date: Tue, 16 Jun 2026 17:09:22 +0800 Subject: [PATCH] fix: playbook clone_from check playbook scope --- apps/ops/api/playbook.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/apps/ops/api/playbook.py b/apps/ops/api/playbook.py index 25f3e6484..c547db793 100644 --- a/apps/ops/api/playbook.py +++ b/apps/ops/api/playbook.py @@ -66,6 +66,10 @@ class PlaybookViewSet(JMSBulkModelViewSet): clone_id = self.request.query_params.get('clone_from') if clone_id: + queryset = self.get_queryset() + clone_from = queryset.filter(id=clone_id).first() + if not clone_from: + raise JMSException(code='invalid_clone_id', detail={"msg": "Invalid clone_from id"}) src_path = safe_join(base_path, clone_id) dest_path = safe_join(base_path, str(instance.id)) if not os.path.exists(src_path):