github/jumpserver
1
0
Fork 0
mirror of https://github.com/jumpserver/jumpserver.git synced 2026-08-08 23:35:34 +00:00
Code Issues Projects Releases Wiki Activity

fix: Correctly pass runas value in ACL check for job execution

Browse Source
This commit is contained in:
wangruidong
2025-11-19 18:57:24 +08:00
committed by Jiangjie Bai
parent 1a3fb2f0db
commit be0f04862a
1 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
apps/ops/api/job.py
View File

@@ -140,7 +140,7 @@ class JobViewSet(LoginAssetACLCheckMixin, OrgBulkModelViewSet):
self.check_login_asset_acls(
self.request.user,
assets,
serializer.validated_data.get('runas'),
job.runas,
get_request_ip_or_data(self.request)
)
@@ -340,13 +340,13 @@ class UsernameHintsAPI(APIView):
assets = merge_nodes_and_assets(node_ids, assets, request.user)
top_accounts = Account.objects \
.exclude(username__startswith='jms_') \
.exclude(username__startswith='js_') \
.filter(username__icontains=query) \
.filter(asset__in=assets) \
.values('username') \
.annotate(total=Count('username')) \
.order_by('-total', '-username')[:10]
.exclude(username__startswith='jms_') \
.exclude(username__startswith='js_') \
.filter(username__icontains=query) \
.filter(asset__in=assets) \
.values('username') \
.annotate(total=Count('username')) \
.order_by('-total', '-username')[:10]
return Response(data=top_accounts)